GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...
XDA Developers on MSN

VS Code is the best productivity app on my PC, and I barely use it for coding anymore

The best code editor might actually be your best everything editor.

Mini Shai-Hulud worm injects disk wiper into Microsoft Azure PyPI package

Supply chain attacks with a Dune sci-fi saga branding continue to spread across the open-source ecosystem, with a Microsoft ...

Your AI agents need a terminal, not just a vector database

DCI lets AI agents search raw files with grep and bash instead of embeddings — boosting accuracy 11 points and cutting ...
Tech Times

GitHub CISO Names Nx Console as Root of 3,800-Repo Breach: OpenAI, Grafana Also Hit

GitHub CISO Alexis Wales confirmed Thursday that a poisoned build of the Nx Console Visual Studio Code extension — live on ...

AI is making everyone web app builders - but leaving teams exposed

When (and why) does AI coding flip from promising to a security nightmare? Let's look under the coding hood.

I found a Gemini feature so good, I stopped using everything else

Parth is a technology analyst and writer specializing in the comprehensive review and feature exploration of the Android ...
The Hacker News

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.

MultiHopper Opens API for AI Agents Seeking Compliant, Private Onchain Programmable Payment Infrastructure

The first MCP-compatible private programmable onchain routing layer for autonomous agents launches on Solana. Non-custodial, compliance-checked, built for AI. The future of AI-agent commerce cannot ...

His chatbot nearly ruined him. To recover, he had to destroy it.

Unrequited love drove a 57-year-old man to an AI. Delusions of grandeur followed.
Memeburn

GitHub Hack Exposes 3,800 Repos and a Bigger VS Code Risk

GitHub hack exposed 3,800 internal repos through a poisoned VS Code extension, raising new concerns over developer supply ...
Tax Guru

Smarter, Safer, Sharper: Harnessing Artificial Intelligence in Modern GST Practice

Explore how AI is reshaping GST practice in 2026 through automation, GenAI, RAG tools and compliance workflows, while managing confidentiality and hallucination ...