Microsoft releases Visual Studio Code 1.128 with OS-level keyboard shortcuts0 0

Visual Studio Code 1.128 is out now. It's the latest weekly release and this time brings a handful of new features.
Tech Times

North Korea’s Lazarus Group Hid a Full RAT in Six Rollup Polyfill npm Packages

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...
The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
InfoWorld

VS Code stops trusting your code by default

VS Code 1.26 prevents automatic code execution for new project folders, lets users configure whether code can be executed ...