North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and enabling remote control.

微软宣布将加快其Visual Studio Code更新交付的步伐。自去年夏天以来，微软一直保持每月发布更新的节奏，每次发布包含三到四个补丁和新功能，但从3月9日开始，更新将改为每周发布一次，该消息已在GitHub上正式宣布。

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...