Fake VS Code alerts on GitHub spread malware to developers
Over Security - Cybersecurity news aggregator [Unofficial]
March 27, 2026
A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading malware.
Discussion in the ATmosphere