← Back to Trending
TRENDING
TTP
2026-03-30 07:47 UTC
Fake VS Code alerts on GitHub spread malware to developers
Trending | Ttp
TREND SUMMARY
A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading malware.
Overview
A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading malware.
Organisations Involved
The following organisations are mentioned in relation to this incident: GitHub, Visual Studio Code.
ENTITIES
GitHubVisual Studio Code
DEBUG — Testing Information
| AR-ID | 69acee5e-ac20-49aa-a156-b75384d72933 |
| NEWS-ID | d0888dc4-cccc-4982-8eb0-4fe5a90578c7 |
| Article type | trending |
| Categories | ttp |
| Quality score | 0.9180 |
| Generation timestamp | 2026-03-30 07:47 UTC |
| Publish timestamp | 2026-03-30 07:47 UTC |
| Editor corrections | [{"by": "cn-editor", "note": "passed quality checks", "score": 0.918}] |
ENTITIES:
GitHub
Visual Studio Code
EMBEDDING: 384-dim (present)