Project
Microsoft's free, open-source code editor supporting extensions, debugging, and remote development, widely used across programming languages and platforms.
Worms spreading through npm in May and June 2026 committed a SessionStart hook to .claude/settings.json that runs a script when Claude Code opens the repo. Removing the package leaves that file in place, a dev.to write-up says.
Reality
Copilot's --yolo, /yolo and VS Code's Allow all remove only the approval prompt, according to a dev.to walkthrough of the Copilot docs. Deny rules still win, and the CLI and VS Code use separate permission systems that each need configuring.
Reality
GitHub added local Ollama model discovery to Copilot CLI 1.0.94-0 and took its agent sandbox to general availability on October 7, dev.to reported. Keeping work on a developer's machine still takes manual steps, since Ollama must be installed first and offline mode is a separate setting.
Reality
SAP's VS Code ABAP Development Tools are generally available, with 80% object-type parity against Eclipse ADT due by end-2026, a dev.to post says. The post's own list of gaps means most teams will keep Eclipse ADT running beside it.
Reality
Microsoft plans to run MAI Code 1.1 Flash on developers' machines in GitHub Copilot, with a limited rollout starting by end-October 2026. Its figures come from one high-end laptop and local pricing is undisclosed, so teams cannot yet size the hardware or the bill.
Reality
Theo Browne's AI-written Rust port of the TypeScript compiler type-checks VS Code 13x faster than tsc 6 and cost over $420,000 in tokens. Browne says he never read the code, so the 181,711 ported tests it passes are the main evidence that it behaves correctly.
Reality
Anaconda has built tools from three acquired companies that run AI agent swarms and red-team them across more than 300 attack categories. Its controls for blocking risky agents look further along than its tools for auditing what they did.
Reality
Symantec says Warlock operators ran an AV/EDR killer across at least 40 machines in roughly two hours after a suspected SharePoint compromise. The ransomware payloads moved between domain controllers through SYSVOL replication.
Reality
Claude Desktop's custom connectors offer only OAuth sign-in for remote MCP servers, while five other clients take a static API key in a header. Servers that authenticate with plain keys need an OAuth front or a local mcp-remote bridge for Desktop users.
Reality
China-linked Warlock operators hit at least four organisations through SharePoint flaws in two months, Symantec says. Its report lists six 2026 SharePoint CVEs only as possible additions, and the entry it documents is still older flaws on servers never patched or mitigated.
Reality
Pluto Security says the SleepyDuck operator re-listed fake Solidity extensions on Open VSX within hours of a takedown, in a stage it calls EtherDuck. Each wave stayed up about 19 hours, long enough for a single install to leave persistent access that the takedown did not remove.
Reality
Microsoft released metadata from 301,026 GitHub Copilot agent sessions, covering 9.3 million LLM calls in one June week. Capacity planners now have real cache and token figures to test against, though the files measure resource use only and cannot show whether the output was any good.
Reality
Microsoft's Go port of the TypeScript 7 compiler cut VS Code's full build from 125.7 to 10.6 seconds in its benchmarks. Tools that import TypeScript as a library may still need the TypeScript 6 API, so the upgrade belongs on a throwaway branch first.
Reality
One OpenAI Codex prompt spawned 826 child agents and burned about $78,000 in credits, according to the user's own reconstruction. Nearly all the counted tokens trace to an alpha client build, and only OpenAI's servers can turn them into dollars.
Reality
The August 17 postmortem describes a sidecar that hit its concurrency limit while its autoscaler measured the host, then a VS Code retry bug that kept Copilot down hours after everything else returned.
Perspective Coverage
3 publishersReality
Mandiant's findings say the intrusion never reached Checkmarx One or production AWS, and that answers the vendor's question rather than the one a customer has about what a build box pulled in late March.
Reality
Oizom's orchestrator gives each approved ticket its own branches, services and database copy, so one developer can run several AI agent tasks at once. Its team lead says the setup is mostly scripts, so the limit is how many live stacks one person can test.
Reality
Imperva found Microsoft's DebugMCP 1.1.4 let a malicious webpage run code on a developer's machine through an unauthenticated port 3001 listener. The fix reached 1.2.0 with no advisory, so finding exposed machines means checking installed extension versions.
Reality
Four governments have put a bureau name on the fake-recruiter campaign against software developers, and their alert says the same crews also work as North Korea's remote IT hires, from the same IP addresses.
Perspective Coverage
8 publishersReality
A dev.to writeup traces roughly 3,800 exfiltrated GitHub repositories to one trojanised Nx Console install from the official Marketplace, where the sandbox that would have contained it has been an open feature request since 2018.
Reality
Security · September 21, 2026 · Confirmed2 publishers
Build · September 18, 2026 · One report1 publisher