Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...

The Shai Hulud variant’s blast radius includes several highly popular packages thus far.. Security teams are urged to perform ...

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly ...

Rolling out now ...

Running AI locally isn’t just for developers or privacy purists anymore. Every time you copy a sensitive client proposal, an unannounced product roadmap, or a private financial spreadsheet and paste ...

Five free Marketplace extensions promise private, locally run coding assistance as developers look for alternatives to metered cloud AI.