VS Code flaw lets attackers reuse deleted extension names, enabling ransomware payload delivery and supply chain risks.

Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages ...

Nx supply chain attack on Aug 26, 2025 leaked 2,349 secrets via npm packages, risking GitHub and cloud accounts.

OpenAI has updated its Codex AI coding agent with a new VS Code extension, GPT-5 power, and automated GitHub pull request reviews for a unified developer experience.