Microsoft's Visual Studio Code ... and Cycode found that the algorithm used to encrypt tokens was AES-256-GCM, ... deciphering and printing all passwords of locally installed extensions.

Chinese hackers targeting large IT service providers in Southern Europe were seen abusing Visual Studio Code (VSCode) tunnels to maintain persistent access to compromised systems.