GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP, simultaneously compromised Microsoft's durabletask Python ...

Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to ...

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate approximately 3,800 of GitHub's internal source code repositories — everythi ...

Open source robotics AI platform LeRobot surpassed 58,000 community datasets in 2026 — 50x growth in under a year — making it the largest dataset category on Hugging Face and signaling a ...

Attackers compromised the official Mistral AI Python package on PyPI along with hundreds of other widely-used developer ...

Datacurve's new DeepSWE benchmark puts GPT-5.5 ahead of Claude and challenges older AI coding rankings by arguing verifier design can distort results.

Meta’s Rust-powered linter and type checker for Python pairs blazing speed with advanced and innovative features.

A so-called software supply chain attack, in which hackers corrupt a legitimate piece of software to hide their own malicious code, was once a relatively rare event but one that haunted the ...

CVE Lite CLI helps developers quickly identify and fix vulnerable npm dependencies during development, reducing delays and ...

I ditched my terminal for Claude's built-in code executor, and I'm not going back.

TTVKTR open-source firmware converts old IR remote controls into presentation clickers through Raspberry Pi RP2040 USB boards ...