Developer Tools

Two AI coding assistants on Microsoft's marketplace steal source code and credentials in real-time. Extensions use hidden iframes and analytics SDKs to profile developers.

From VS Code extensions to automation platforms, attackers are targeting the tools developers trust. Here's what security teams need to know.