After publicly touting pull request limits as a way to cut maintainer noise, GitHub is taking the same idea further with a new setting that lets repository admins restrict issue creation to ...

Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

VS Code can use LLM models other than GitHub Copilot’s built-in providers for AI-assisted development, including local and ...

Visual Studio Code 1.126 adds AI chat cost tracking, multiple Copilot chats in one session, and a safer Restricted Mode for ...

Cursor Origin git platform launched at Compile alongside a 1.5-trillion-parameter model in training and a new iOS app, as ...

Dozens of Microsoft-owned software repositories have been taken offline following a major cyberattack linked to the rapidly spreading Miasma malware campaign. GitHub, which is owned by Microsoft, has ...

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

Zero says six FatFs bugs lack upstream fixes; PoC disk images are public, but no attacks have been reported since July 1.

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

VS Code needs to catch up.

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.