OpenAI has updated its Codex AI coding agent with a new VS Code extension, GPT-5 power, and automated GitHub pull request reviews for a unified developer experience.

VS Code flaw lets attackers reuse deleted extension names, enabling ransomware payload delivery and supply chain risks.

Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages ...

But let's be real, it's hard not to feel that Bethesda would be making a lot more noise about Starfield if it had gone down ...