Five free Marketplace extensions promise private, locally run coding assistance as developers look for alternatives to metered cloud AI.

A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.

Microsoft's latest weekly VS Code release adds contextual side conversations, element-level web feedback and several smaller editor refinements.

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

A self-propagating malware campaign has compromised more than 430 npm packages, exposing software projects linked to dependencies that collectively record about two billion installations each month.

Spread the loveIf you’ve ever wrestled with data, tried to organize information, or collaborated on a project, chances are ...

Latest update to Microsoft’s code editor improves dictation, introduces side chats, and adds support for comments to provide ...

Meta's Muse Code runs in your terminal, coordinates subagents, and survives crashes—but lags behind on the benchmarks that ...

The code-testing-generator searches your repository for code that needs tests, then plans, writes, and checks its tests to ...

AWS now allows vibe coding tool Superblocks to be embedded into the private clouds of AWS customers. It's another step ...

To minimize the exposure of company data, AI agents start out with no permissions to access or share resources and must ...

Built for agents and would-be app makers to wrangle complicated workflows, this programmable shortcut pad makes AI tangible.