A single developer. One poisoned extension. Five supply chain surfaces compromised in 48 hours. And a threat group claiming ...

A single npm user on Thursday published 14 malicious packages within a four-hour window, all mimicking popular OpenSearch, Elasticsearch, DevOps, and environment-configuration libraries, according to ...

Malicious npm package downloaded 676 times stole Claude AI files via GitHub uploads, increasing AI-driven malware risks.

Euro-Office, Europe's open-source alternative to Microsoft Office and Google Docs, launches June 9 ...

Google Gemini CLI loses free-user API access on June 18, replaced by the closed-source Antigravity CLI. Developers who contributed 6,000 merged pull requests are calling it a bait-and-switch — ...

I tested Wispr Flow and various AI-powered transcription software to see whether you should bother subscribing or stick with free services.

Whoopsie.

Microsoft announced Azure Linux 4.0 and Azure Container Linux at Open Source Summit. Azure Linux 4.0 is a Fedora-based ...

My new favorite Windows app made my PC safer and more reliable - and it's free ...

GitHub hack exposed 3,800 internal repos through a poisoned VS Code extension, raising new concerns over developer supply ...

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

Malicious Sicoob.Sdk stole PFX certificates and client IDs via NuGet downloads, enabling API impersonation and payment abuse risks.