GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...
ZDNet

Microsoft boosts programming language Python's popular VS Code extension

Microsoft has released a host of improvements and fixes for the Python extension for its popular open-source code editor, Visual Studio Code (VS Code), as well as new improvements for Java on VS Code.
Compare the Cloud

GitHub VSCode extension breach exposes developer toolchain as a primary attack surface

An unauthorised group calling itself TeamPCP accessed GitHub's internal repositories, targeting VSCode extensions used by ...
ZDNet

Microsoft's Python extension for VS Code just added the fast-coding Pylance language server

I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen Best laptop cooling pads Best flip ...
Visual Studio Magazine

Python in Visual Studio Code Gets 3 New Extensions

Microsoft's Python in Visual Studio Code dev team introduced three new extensions: Black Formatter, isort and Jupyter Powertoys. The new tools, included in the May 2022 release of the Python and ...
CSOonline

Verified, but vulnerable: Malicious extensions exploit IDE trust badges

Developers across popular integrated development environments (IDEs) like Visual Studio Code, Visual Studio, IntelliJ IDEA, and Cursor are at risk of running malicious extensions marked as “verified.” ...
Bleeping Computer

'WhiteCobra' floods VSCode market with crypto-stealing extensions

A threat actor named WhiteCobra has been targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the Visual Studio marketplace and the Open VSX registry. The campaign is ...