77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data
Seventy-seven counterfeit extensions appeared on Open VSX between July 26 and Aug. 1, impersonating legitimate Visual Studio Code Marketplace tools...
Open Source
Python Now Has a Post-Quantum Encryption Library
Python Now Has a Post-Quantum Encryption Library This is good: Post-quantum cryptography is now one pip-install away for the entire...
Hugging Face Deepfake Tests Raise New Risks for AI Procurement
Seven of nine image-editing tools tested on Hugging Face produced sexualized alterations of a woman’s photograph after receiving a straightforward...
GitHub Automatically Holds Suspicious Actions Runs, but Repository Owners Must Approve Them
GitHub is adding a human checkpoint before certain suspicious Actions workflows can run in public repositories. The company announced on...
SpaceXAI Open-Sources Grok Build After Privacy Backlash
SpaceXAI has open-sourced Grok Build, its terminal-based AI coding agent and text user interface (TUI), releasing the project’s source code...
AI Breakthroughs, Security Breaches, and Industry Shakeups Define the Week in Tech
Image created with ChatGPT From record AI funding and multimodal model launches to malware campaigns, robotaxi failures, and fresh waves...
The State of Trusted Open Source Report
In December 2025, we shared the first-ever The State of Trusted Open Source report, featuring insights from our product data and customer...
6 Best Open Source Password Managers for Windows in 2026
This guide is for Windows users who prefer open-source solutions and want a clear, practical overview of the best open-source...
Et Tu, RDP? Detecting Sticky Keys Backdoors with Brutus and WebAssembly
Everyone knows that one person on the team who’s inexplicably lucky, the one who stumbles upon a random vulnerability...
