Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

Welcome to the source code of the Actionforge VS Code Extension Actionforge supercharges your GitHub Actions workflow experience in VS Code. Designed for time saving, this extension integrates ...

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...