The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
InfoWorld

Visual Studio Code improves tools for agents

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...
Tech Times

Microsoft Pulls 119 Malicious Edge Extensions Hiding Malware in Images

StegoAd Microsoft Edge extensions malware affected up to 2.6 million users after the company removed 119 add-ons that hid ...
latesthackingnews.comOpinion

Amazon Q’s MCP Flaw Is an Industry Warning: AI Tools Still Lack Workspace Trust Standards

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...
GitHub

Liberty Tools for Visual Studio Code

Note: Requires Visual Studio Code 1.78.0 or later, and Java 21 or later. This page provides an overview of Liberty Tools for Visual Studio Code. For minimum requirements information and detailed ...
The Hacker News

Microsoft Fixes One-Click GitHub Dev Attack That Let Attackers Steal OAuth Tokens

Cybersecurity researchers have disclosed a one-click attack via Microsoft Visual Studio Code (VS Code) that makes it possible to steal a user's GitHub token. "Just by clicking a link, it's possible ...
GitHub

Redis for VS Code

Redis for VS Code is the official Visual Studio Code extension that provides an intuitive and efficient GUI for Redis databases, developed by Redis. Universal Redis Support: Connect to any Redis ...