VS Code model picker now allows users to switch between Anthropic and Copilot providers between turns reconfiguring the agent host. Microsoft has released Visual Studio Code 1.133, an update to its ...

Microsoft's latest VS Code update adds provider switching and a GitHub-free entry path specifically for Claude sessions.

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

Five free Marketplace extensions promise private, locally run coding assistance as developers look for alternatives to metered cloud AI.

More than 400 NPM packages have been infected with the Mini Shai-Hulud worm in the ChainDrop supply chain attack.

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...

A Keyv-linked npm worm poisoned 353 versions across 79 package names, stealing developer and CI credentials while repository ...

A massive supply chain attack on the Node Package Manager (npm) registry has infected over 400 packages with over 2 billion downloads with the ...

BSides Las Vegas 2026 spent three days making the case that AI coding tools are supply chain attack targets. ChainDrop, a ...

Sinch today announced the availability of Agent Tools, a new suite of tools designed to help developers build, test and deploy applications powered by the Sinch communication infrastructure platform ...

A new developer toolkit integrates AI coding assistants with communication APIs, enabling in-editor application development, ...