Agents, browser debugging, and deprecation of Edit Mode are all highlighted in the latest versions of the popular code editor.

North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and enabling remote control.

Everything you may have missed from the past week.

The newly observed malware abuses VS Code’s “runOn:folderOpen” feature to execute automatically from trusted projects, enabling near-frictionless compromise.

VS Code 1.113 adds new themes, AI reasoning controls, and nested subagents, improving workflows and customization for ...

Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide. This analysis walks through the Trivy supply‑chain compromise, attacker ...