VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.

Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...

The threat actor seeding the Open VSX code marketplace with fraudulent extensions that download the GlassWorm malware has ...

Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding ...

A new report dubbed "BrowserGate" warns that Microsoft's LinkedIn is using hidden JavaScript scripts on its website to scan visitors' browsers for installed extensions and collect device data.

Try these extensions and you'll wonder how you ever lived without them!

Please stop showing the nag popup when I disable all my extensions. I would like a way to completely disable it. Also it doesn't make sense to show this when vscode is open with the flag ...

→エラーをエディタ上に直接表示できるため、この拡張機能と併用することで視認性が向上します。