A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.

BSides Las Vegas 2026 spent three days making the case that AI coding tools are supply chain attack targets. ChainDrop, a ...

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

A Keyv-linked npm worm poisoned 353 versions across 79 package names, stealing developer and CI credentials while repository ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents generally available. Visual Studio Code 1.127, an update to Microsoft’s ...

Twenty years ago, at NBC‘s 2006 upfront presentation, the network unveiled its 2006-07 lineup which featured two new series on the fall schedule, Aaron Sorkin’s drama Studio 60 On the Sunset Strip and ...

Preview of new companion app allows developers to run multiple agent sessions in parallel across multiple repos and iterate on human and agent reviews. Visual Studio Code 1.115, the latest release of ...

Companies are scrambling to deal with the glut. Credit...Mojo Wang Supported by By Mike Isaac and Erin Griffith Reporting from San Francisco When a financial services company recently began using ...

Anthropic accidentally leaked part of the internal source code for its coding assistant Claude Code, according to a spokesperson. The leak could help give software developers, and Anthropic's ...

Anthropic's Claude chatbot has been updated with support for inline visual content that will help it provide clearer answers. Claude can now create custom visuals like charts, graphs, and diagrams.

Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collectively downloaded more than 128 million times could be exploited to steal local ...