The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

A PreToolUse hook that intercepts and blocks destructive git and filesystem commands before AI coding agents run them. CC Safety Net parses command semantics — so flag reordering, shell wrappers, and ...

AI agents are now taking over repetitive work, identifying issues humans may miss, and helping teams maintain testing speed ...

GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...

GitHub moved the AI coding landscape on Wednesday when it made Kimi K2.7 Code — a Beijing-built, open-weight model from Moonshot AI — generally available in the GitHub Copilot model picker, marking ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

Z.ai has launched ZCode, a free AI coding tool powered by GLM-5.2 that challenges Cursor, Claude Code and GitHub Copilot ...

Anthropic has launched Claude Sonnet 5 for lower-cost multi-step AI agent work, with broad developer access, dicounted ...

New root cause analysis technology gives AI coding agents the ability to diagnose application failures and deliver actionable debugging insights with less developer involvement.

If your current setup is the bottleneck, this fixes it for less than the price of a single billable hour. Get Visual Studio ...

Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.