A hijacked GitHub account let the Shai-Hulud worm pass npm's trust check, spreading through packages with 2 billion monthly ...
Microsoft's latest weekly VS Code release adds contextual side conversations, element-level web feedback and several smaller editor refinements.
A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development ...
A Keyv-linked npm worm poisoned 353 versions across 79 package names, stealing developer and CI credentials while repository ...
Five free Marketplace extensions promise private, locally run coding assistance as developers look for alternatives to metered cloud AI.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results