Microsoft expanded model choice in VS Code with Bring Your Own Key (BYOK), enabling developers to connect models from any provider and manage them through a new extensible API.
Researchers uncover SleepyDuck RAT hidden in VSX extension, using Ethereum contracts to control infected hosts.
GitHub unveiled Agent HQ at its Universe 2025 event, a new platform that lets developers orchestrate multiple AI agents ...
On the opening day of GitHub Universe 2025, GitHub announced Agent HQ, its vision for the future of the platform.
Open VSX fully contained the GlassWorm attacks and says it was not a self-replicating worm in the traditional sense. The GlassWorm campaign that infected VS Code extensions in the Open VSX marketplace ...
The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to publish malicious extensions in an attempted ...
Best practices include a focus on hardening user authentication and access, ensuring strong network encryption, and minimizing application attack surfaces.