GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.

I ditched VS Code for Zed instead of going for Google's Antigravity, and now the editor feels genuinely fast ...

The best code editor might actually be your best everything editor.

GitHub’s internal repositories — now staged publishing in npm 11.15.0 requires a human 2FA approval before any package goes ...

Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.

The four C&C channels used by GlassWorm, the botnet targeting open source software developers, have been disrupted.

Ubiquiti released a new security bulletin detailing fixes for six security issues, including one rated 9.1 (critical) and one scoring a perfect 10.0 on the CVE risk scale. The vulnerabilities range ...

Suswati Basu is a multilingual, award-winning editor. She was shortlisted for the Guardian Mary Stott Prize and longlisted for the Guardian International Development Journalism Award.… According to ...

The AI company's Bumblebee tool tackles your most urgent question after any supply‑chain advisory: Do your programmers have ...

Claude Code plugins now have an official Anthropic-managed directory at github.com/anthropics/claude-plugins-official, consolidating 30-plus internal and 15 vetted external Claude Code extensions behi ...

For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through ...