After publicly touting pull request limits as a way to cut maintainer noise, GitHub is taking the same idea further with a new setting that lets repository admins restrict issue creation to ...

Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

VS Code can use LLM models other than GitHub Copilot’s built-in providers for AI-assisted development, including local and ...

Dozens of Microsoft-owned software repositories have been taken offline following a major cyberattack linked to the rapidly spreading Miasma malware campaign. GitHub, which is owned by Microsoft, has ...

Microsoft has removed dozens of GitHub repositories after a malware scare. The affected projects may have exposed users to password and credential theft.

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...