77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data
Seventy-seven counterfeit extensions appeared on Open VSX between July 26 and Aug. 1, impersonating legitimate Visual Studio Code Marketplace tools...
developer security
GitHub Automatically Holds Suspicious Actions Runs, but Repository Owners Must Approve Them
GitHub is adding a human checkpoint before certain suspicious Actions workflows can run in public repositories. The company announced on...
Cursor Quietly Patches High-Severity Git Vulnerability After Seven-Month Delay
Opening a Git repository in a vulnerable version of Cursor could be enough to give attackers code execution on a...
SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
A critical flaw in SimpleHelp, remote-access software used by IT teams and managed service providers, has been exploited to deliver...
New GitHub Zero-Day Exposed Developer Tokens to Attackers
A single click on the wrong repository could have put a developer’s GitHub access at risk. Security researcher Ammar Askar...
Fake Claude Code Spreads Malware to Windows, macOS Users
Image: Rawpixel/Envato Threat actors are exploiting a common developer habit — copying installation commands directly from websites — to distribute...
