Curated security research, vulnerabilities, advisories and tools for practitioners.

#vscode

Security coverage tagged vscode.

1.

GitHub's VS Code Extension Breach Was a Developer-Device Failure, Not a GitHub-Only Story

blog | 2026-05-20 00:00 | bugbunny.ai | original ↗ | #ai-security | #supply-chain | #developer-security

2.

The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave

blog | 2026-05-19 08:29 | wiz.io | original ↗ | #supply-chain | #malware | #credential-theft

3.

Malicious VSCode Extension Launches Multi-Stage Attack Chain with Anivia Loader and OctoRAT

blog | 2025-12-03 00:00 | hunt.io | original ↗ | #supply-chain | #attack-chains | #malware

4.

Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces

blog | 2025-10-15 12:00 | wiz.io | original ↗ | #supply-chain | #secrets | #marketplace

5.

Top 5 hacking tools for white-box pentesting

blog | 2024-10-10 13:28 | yeswehack.com | original ↗ | #pentesting | #fuzzing | #sast

6.

Streamline your static analysis triage with SARIF Explorer

blog | 2024-03-20 13:30 | blog.trailofbits.com | original ↗ | #triage | #static-analysis | #tool-release

7.

Read code like a pro with our weAudit VSCode extension

blog | 2024-03-19 13:30 | blog.trailofbits.com | original ↗ | #code-review | #security-audit | #collaboration

8.

Escaping misconfigured VSCode extensions

vulnerability | 2023-02-21 13:00 | CVE-2022-41042 | blog.trailofbits.com | original ↗ | #vulnerability-research | #xss | #path-traversal