Note: Keyboard shortcuts work when the Jira My Work view is focused. /src /api # Jira API client and authentication /commands # Command handlers /providers # Tree view and webview providers /models # ...

North Korea is doubling down on a familiar playbook by weaponizing trust in open-source software and developer workflows. The ...

Visual Studio Marketplace: https://marketplace.visualstudio.com/items?itemName=kudoas.erb-inline-js-helper Quick open in VS Code: vscode:extension/kudoas.erb-inline ...

Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, recommend extensions that are non-existent in the OpenVSX registry, allowing ...

Two VSCode extensions are harvesting sensitive data and sending it to China.

A new Visual Studio Code extension called Nogic sparked a wide-ranging Hacker News discussion, with commenters praising its ...

Another wave of malicious browser extensions capable of tracking user activity have been found across Chrome, Firefox, and ...

Get started with OpenAI Codex AI coding assistant. Learn how Codex connects to MCP servers like Figma and Jira, pulling docs ...

These need to be uninstalled manually ...