Malicious Microsoft VSCode AI extensions might have hit over 1.5 million users

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious VS Code AI Extensions Compromise 1.5 Million Users Malicious AI extensions for Microsoft Visual Studio Code have been identified, affecting over 1.5 million users by stealing developer source code. The extensions, which were widely installed, pose a significant risk to software development security. 2 sources 24