Curated security research, vulnerabilities, advisories and tools for practitioners.

#vscode

Security coverage tagged vscode.

1.

GitHub's VS Code Extension Breach Was a Developer-Device Failure, Not a GitHub-Only Story

blog | 2026-05-20 00:00 | bugbunny.ai | Original ↗ | .md | #ai-security | #supply-chain | #developer-security

2.

The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave

blog | 2026-05-19 08:29 | wiz.io | Original ↗ | .md | #supply-chain | #malware | #credential-theft

3.

RCE in VSCode Copilot Chat

vulnerability | 2026-05-13 00:00 | hacktron.ai | Original ↗ | .md | #rce | #prompt-injection | #vscode

4.

Malicious VSCode Extension Launches Multi-Stage Attack Chain with Anivia Loader and OctoRAT

blog | 2025-12-03 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #attack-chains | #malware

5.

Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces

blog | 2025-10-15 12:00 | wiz.io | Original ↗ | .md | #supply-chain | #secrets | #marketplace

6.

Top 5 hacking tools for white-box pentesting

blog | 2024-10-10 13:28 | yeswehack.com | Original ↗ | .md | #pentesting | #fuzzing | #sast

7.

Streamline your static analysis triage with SARIF Explorer

blog | 2024-03-20 13:30 | blog.trailofbits.com | Original ↗ | .md | #triage | #static-analysis | #tool-release

8.

Read code like a pro with our weAudit VSCode extension

blog | 2024-03-19 13:30 | blog.trailofbits.com | Original ↗ | .md | #code-review | #security-audit | #collaboration

9.

Escaping misconfigured VSCode extensions

vulnerability | 2023-02-21 13:00 | CVE-2022-41042 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #xss | #path-traversal

10.

CVE-2021-43908: Remote code execution in VSCode restricted mode

vulnerability | 2022-06-29 00:00 | CVE-2021-43908 | hacktron.ai | Original ↗ | .md | #rce | #vulnerability-research | #webview