A large-scale phishing campaign is targeting software developers on GitHub, using fake Visual Studio Code security alerts posted in GitHub Discussions to trick users into downloading malicious software. The attacks are designed to look like legitimate security advisories, warning developers of critical vulnerabilities in VS Code and urging them to install a so-called “patched” version […] The post Fake VS Code Security Alerts on GitHub Used to Push Malware in Widespread Phishing Campaign appeared first on Cyber Security News.