Two VSCode extensions are harvesting sensitive data and sending it to China.
Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to ...
VS Code forks like Cursor, Windsurf, and Google Antigravity may share a common foundation, but hands-on testing shows they ...
Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
The project is in an experimental, pre-alpha, exploratory phase with the intention to be productionized. We move fast, break things, and explore various aspects of the seamless developer experience ...
If you find any work missing or have any suggestions (papers, implementations, and other resources), feel free to pull requests. We will add the missing papers to this repo as soon as possible. You ...
A spear-phishing campaign tied to the Democratic People's Republic of Korea (DPRK) uses trusted Microsoft infrastructure to ...
A new Visual Studio Code extension called Nogic sparked a wide-ranging Hacker News discussion, with commenters praising its ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results