Breach404
Back to Insights
Secure Software2 min readJune 8, 2026

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

Microsoft has introduced a two-hour delay before Visual Studio Code extensions automatically update to help detect and prevent malicious code from spreading through compromised extensions. You should monitor your development environments for unexpected ex

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free