A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading malware. [...]
Fake VS Code alerts on GitHub spread malware to developers
Summary + source link. No paywalls, no tracking.