According to Socket, the extensions (complete list here) are published under five distinct publisher identities – Yana ...
GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.
GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...
Latest weekly update supports previewing videos in the image carousel, adds a Copy Final Response command to the chat context ...
OpenClaw's Node for VS Code extension proved it can support a real local file-based workflow, but on Windows the experience still feels more like early infrastructure than finished tooling.
This is GlassWorm: a software supply chain attack that security researchers are calling one of the most sophisticated and ...
Anthropic has accidentally exposed Claude Code's full 512,000-line TypeScript source via an npm source map, revealing ...
Socket uncovers large-scale GitHub spam campaign abusing “Discussions” notifications Fake advisories with bogus CVEs trick developers into downloading malware via cloud-hosted links Thousands of ...
Hackers target GitHub developers with fake VS Code alerts and CVEs, using malicious links to steal data and deliver malware.
There's a lot of buzz around OpenClaw lately, so I had to check it out in my favorite editor, VS Code. Turns out this is a nascent space, not much being done with the new it agentic AI tool and the ...