VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
The Hacker News | #1 Trusted Source for Cybersecurity News [Uno…
June 8, 2026
Microsoft has announced that Visual Studio Code (VS Code) will apply a two-hour delay before extensions for the integrated development environment (IDE) are updated automatically to a newer version in an attempt to tackle software supply chain threats.
"When automatic updates are enabled, new versions are auto-updated two hours after they are published, adding an extra layer of protection
Discussion in the ATmosphere