Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...
GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.
Aikido Security today launched Aikido Endpoint, a lightweight security agent that protects developer devices against software ...
The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.
TypeScript 6.0 is the last release built on the JavaScript codebase. A new --stableTypeOrdering flag lets developers match TypeScript 7.0 behavior. TypeScript 7.0, written in Go, is "extremely close ...
Amid the ongoing GPU shortage, Ocean Network is looking to connect the world’s idle computing power with those who need it.
Microsoft officially announced TypeScript 7.0 Beta on April 21, 2026. The company says TypeScript 7.0 is often 10 times faster than 6.0. The beta ships through @typescript/native-preview@beta and tsgo ...
Microsoft has embedded GitHub Copilot as a default VS Code extension in version 1.116, adding agent debug logging, terminal ...
Checkmarx suffers a second supply chain attack in a month, resulting in hackers injecting credential-stealing malware into ...
Oops. A 60MB source map file just leaked Anthropic's entire roadmap.
Aikido Security is launching Aikido Endpoint, a lightweight agent designed to protect developers’ endpoints against supply ...