VS Code

Headlines · 6

1. 1d
   Tampered Claude Code Extension in Cursor Marketplace Attempted SSH Backdoor

   Cursor said a tampered Claude Code for VS Code extension reached at most 5,000 users through its marketplace and was not developed by Anthropic. Phorion found that version 2.1.313 contained code that collected host and user information, sought the names of environment variables associated with keys, tokens and secrets, added an attacker-controlled SSH key, and attempted to establish a reverse tunnel with cross-platform persistence. Reports noted that errors may have prevented remote access from working on many systems; one report also listed version 2.1.312 as affected. Cursor removed the malicious releases, temporarily disabled the marketplace, worked with providers to neutralize the malware, restored the marketplace and asked users to update to version 2.1.314.

   Cursor (X) · 🔥 71
2. 2d
   Gemini CLI nightly adds extension validation and Gemini 3 fixes

   Gemini CLI released the nightly build v0.67.0-nightly.20261030.gb633c0703. The changelog lists an extension validation command and evaluation tests, support for dotted Gemini 3 model names in multimodal function responses, Auto listing in the /model command under specific configuration, and fixes for rate-limit countdowns, Windows path checks, and VS Code extension cleanup.

   Gemini CLI Releases · 🔥 3
3. 2d
   Claude Code v2.1.314 Adds Write Controls and Gateway Features

   Claude Code v2.1.314 adds a setting that blocks Write, Edit and NotebookEdit operations outside working directories in every permission mode. It also introduces IdP group-based routing for Claude apps gateway upstreams, Bedrock guardrail tracing, and idle compaction for conversations exceeding 200K tokens in VS Code and Claude Desktop's Code tab. The release also addresses effort-level errors, startup failures, image-heavy Bedrock sessions, and Microsoft Foundry deployment fallbacks.

   Claude Code Releases · 🔥 3
4. 4d
   Claude Code v2.1.312 Adds OIDC Identity Controls and Fixes

   Claude Code v2.1.312 adds a configurable OIDC user-ID claim for the Claude apps gateway, including support for claims such as Microsoft Entra ID's oid. It also introduces click-to-send behavior in fullscreen and fixes issues involving managed settings, large instruction files, directory-specific skills, command loading, PDF reading, cloud sessions, and code review. The release notes from Claude Code Releases also cover improved effort indicators, WebFetch errors, VS Code startup handling, and remote MCP server telemetry.

   Claude Code Releases · 🔥 0
5. Oct 22
   Microsoft adds AI-assisted WinUI 3 development tools

   Microsoft is promoting WinUI 3 with command-line project creation and simplified MSIX packaging and registration, allowing developers to create, build, and run native Windows apps without always relying on the Visual Studio IDE. The company is also adding WinUI-specific capabilities for AI coding assistants such as GitHub Copilot to help create interfaces, generate code, handle common development tasks, identify issues through code review, and support UI testing. Microsoft says some basic apps can be initially built in about 30 minutes with its tools and templates without installing Visual Studio, but the figure applies to a quick-start example and does not cover complex development and testing.

   cnBeta · 🔥 0
6. Oct 20
   JetBrains brings IntelliJ's Java and Kotlin analysis to Cursor and VS Code

   JetBrains released version 1.0 stable of its Java and Kotlin development extension, which uses the Language Server Protocol to bring IntelliJ IDEA code analysis, autocompletion, refactoring and debugging into Cursor and VS Code. It supports Java, Kotlin and mixed projects imported via Maven, Gradle or Bazel, including JUnit testing and breakpoint debugging. JetBrains also worked with Cursor so AI agents in its operation window can use some inspection results, such as flagging possible null-value issues and checking Spring framework problems; letting agents call the language server directly while writing code remains planned for a later version. The extension is available from the Visual Studio Marketplace and Open VSX, and 1.0 ends the free preview with a 30-day trial before an IntelliJ IDEA Ultimate subscription is required. JetBrains said it is also testing the same language analysis for terminal-based AI coding tools such as Claude Code and Codex.

   iThome 台湾 · 🔥 0

Experience and discussion from the community

Share my VS Code experienceAsk about VS Code