Socket discovered two malicious VS Code themes, Coca-Cola Christmas and Aurora Borealis Studio Theme, still available on the Visual Studio Marketplace, both tied to the previously removed Aurora Noctu…
Developer Ziad Shalaby has released Code Merge, an open-source VS Code extension that merges selected files, folders, or code selections into a single Markdown preview with a project tree and per-file…
A developer audited Meanwhile, a sponsored status-line tool for Claude Code, Copilot CLI, and VS Code, and found the VS Code extension had been silently broken for its core use case since launch. Two …
Cursor's "Import VS Code Configuration" feature copies only extension names, not versions, from Visual Studio Code, so the agentic IDE installs whatever version Open VSX labels newest, according to a …
A developer has built SecretLoop, a secret scanner now in Preview on Open VSX that goes beyond detection to verify whether exposed credentials are still live and guide remediation. The tool integrates…
Pixel Agents, an open-source tool by developer pablodelucca, turns AI coding agents running in terminals into animated pixel-art characters in a virtual office, with a VS Code extension and standalone…
VinvAI released Vinv, an open-source runtime-evidence layer that runs services locally, connects runtime traces to source code, and verifies fixes with acceptance tests, requiring zero code changes an…
Deslop, a new developer tool from Nimblesite, detects duplicate functions and repeated source code across nine programming languages: C#, Rust, Python, Dart, JavaScript, TypeScript/TSX, PHP, F#, and G…
Buckram Studio, a new freemium tool for Cursor, lets writers manage book projects as local Markdown files with Git integration, avoiding context-window bloat by using targeted DIFF edits instead of lo…
The OpenSourceMalware Show #12 featured an interview with Mikael Barbero, Head of Security at Eclipse Foundation, on Open VSX security, and discussed new PolinRider research showing North Korea's auto…
Open VSX, a vendor-neutral extension registry run by the Eclipse Foundation, reached version 1.0 on June 24, 2026, serving as the primary extension source for AI IDEs like Cursor, AWS Kiro, Windsurf, …
CodeBoarding has launched an open-source tool that generates interactive architecture diagrams for codebases by combining static analysis with LLM reasoning. The tool produces layered diagrams, compon…