Cyber security
VS Code Tasks supply chain attack needs new checks
VS Code Tasks supply chain attack is a package hijack pattern that can run outside npm lifecycle scripts, so scan editor configs now.
#vscode
3 stories tagged vscode.
Engineering
Copilot spend meter shows where AI coding costs bite
Copilot spend meter is VS Code's new warning for AI credit overruns. Treat the 1,500 Pro credits as a budget, not a perk.
AI
VS Code Autopilot puts agent risk in every default
VS Code Autopilot is now enabled by default, giving coding agents more autonomy. Treat the new default as a policy change, not a shortcut.