Build type-safe JavaScript applications in less time with Microsoft’s native port of TypeScript built with Go.

Visual Studio Code 1.128 is out now. It's the latest weekly release and this time brings a handful of new features.

Adversaries could plant a malicious repository that executes arbitrary code and steals cloud credentials, showcasing MCP risk.

Amazon Q vulnerability could allow attackers to steal developer cloud credentials by luring them into opening a booby-trapped ...

The Eclipse Foundation offers the registry for Visual Studio Code Extensions as an open alternative to Microsoft's Visual Studio Marketplace.

Validate llms.txt, robots.txt, and AI visibility signals in your editor to protect AI citations before release. AI ...

GitHub, the popular developer platform owned by Microsoft, confirmed it was hacked and attackers had stolen data from around 3,800 internal code repositories. The code hosting and sharing giant said ...

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace checks and silently installing malware onto developers’ systems. Threat ...

A new VS Code extension called Nogic visualizes codebases as interactive graphs and drew strong interest on Hacker News. Commenters praised the concept for understanding large or unfamiliar codebases, ...

The Copilot Studio extension lets developers use any VS Code-compatible AI assistant to develop AI agents, then sync with Copilot Studio for testing and iteration. Microsoft is offering a Microsoft ...

You start by getting the official installer from the Visual Studio Code website. Open your preferred browser on Windows. Go to the Visual Studio Code download page ...

In December 2025, the GlassWorm supply chain malware campaign emerged again, affecting both the Microsoft Visual Studio Marketplace and Open VSX platforms. This episode involved 24 extensions posing ...