Security News Fake VS Code alerts on GitHub spread malware to developers BleepingComputer Daniel Bender 27 Mar 2026 A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading malware.