Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

The project is in an experimental, pre-alpha, exploratory phase with the intention to be productionized. We move fast, break things, and explore various aspects of the seamless developer experience ...

If you find any work missing or have any suggestions (papers, implementations, and other resources), feel free to pull requests. We will add the missing papers to this repo as soon as possible. You ...

The VS Code killer I wasn’t expecting ...

A spear-phishing campaign tied to the Democratic People's Republic of Korea (DPRK) uses trusted Microsoft infrastructure to ...

A new Visual Studio Code extension called Nogic sparked a wide-ranging Hacker News discussion, with commenters praising its ...

The contagious interview campaign continues.

I tried four vibe-coding tools, including Cursor and Replit, with no coding background. Here's what worked (and what didn't).