Critical vulnerabilities in four widely used VS Code extensions could enable file theft and remote code execution across 125M installs.
Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.
VS Code forks are diverging rapidly, not just in features, but in how they structure AI-assisted development workflows. Cursor emphasizes speed and visual polish, Windsurf leans toward dynamic ...
The January 2026 release of Visual Studio Code expands AI-assisted development with structured planning agents, parallel subagents, and unified orchestration across local and cloud environments.