The agent is doing the actual work, and VS Code is just a window.

VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.

A security researcher has publicly disclosed a new Visual Studio Code zero-day vulnerability that can reportedly let ...

A VS Code vulnerability in GitHub.dev lets attackers steal full GitHub OAuth tokens via a single malicious link, exposing all private repositories.

A researcher has disclosed details of a severe VS Code vulnerability that can be exploited to steal GitHub tokens and access ...

A VS Code exploit for github.dev can steal GitHub OAuth tokens after one malicious link, exposing private repositories while teams await a patch.

There's really nothing VS Code can't do ...

Microsoft has released VS Code 1.123 with a new Research Agent, AI session syncing, Chronicle search, browser upgrades, and ...

GitHub says hackers stole about 3,800 internal repos after a poisoned VS Code extension hit an employee device ...

Microsoft’s new C# Dev Kit extension for Visual Studio Code turns the programmer’s editor into a complete development environment for .NET. Microsoft’s Visual Studio is its primary development ...