SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.

GitHub’s engineering team developed a fix and deployed it just over an hour after identifying the root cause, protecting both ...

Thanks to cloud agents, remote coding sessions can now be started from within the IDE, and the C++ code editing tools are ...

GitHub has launched a native stacked pull request workflow through a new CLI extension called gh-stack, closing a gap that ...

By putting the weights of a highly capable, 33B-parameter agentic model in the hands of researchers and startups, Poolside is ...

Embrace VS Code instead of fighting it ...

GlassWorm, a known malware, has put 73 harmful extensions into OpenVSX's registry. Hackers use it to steal developers' crypto ...

The April update suppresses Copilot completions while IntelliSense is active, addressing a long-running editor conflict.

Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating ...

Over 70 clones of popular extensions published to the Open VSX marketplace in April are likely designed to deliver GlassWorm ...

PowerToys has received its latest update and it's a major one for sure. The release brings a new utility borrowed from Linux, ...