The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.

VS Code 1.117 adds bring-your-own model key support for Copilot Business and Enterprise users and introduces a set of chat, agent, terminal, and TypeScript updates.

UNC6692 has been attributed to a large email campaign that's designed to overwhelm a target's inbox with a flood of spam ...

Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest ...

Release delivers what mabl calls "Active Coverage" — quality validation built to keep pace with AI coding agents — addressing a gap revealed in the company's 2026 State of Quality ...

Node.js does not need more theatrical security output. It needs better developer workflow infrastructure. It needs tools that ...

Apple has released iOS 26.4.2 with unspecified bug fixes and a single security patch, while Mozilla’s Firefox 150 adds PDF editing tools, improved split view, and addresses 41 security vulnerabilities ...

Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...

Emmanuel Marill will be tasked with the expansion of ChatGPT’s parent company in key markets, where political pressure is ...

Ready to supercharge your workflow? Microsoft just made VS Code more flexible than ever with local model support and a ...

Rsbuild 2.0 relies on Rspack 2.0, modernizes defaults (ESM-first, Node 20) and reduces dependencies. New APIs enhance ...