Expo published Exact, an open-source runtime that compiles a small interface language into native views on Apple platforms ...

Compare the best code security review tools of 2026 for pull requests and CI. See how Endor Labs and 8 others review ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by planting an SSH key, opening a reverse tunnel, and installing startup scripts.

Cursor removed a compromised Claude Code extension from its marketplace on October 29. This came after researchers found out ...

CopperDragon malware supplier may link five Chinese hacking groups, Check Point Research said Tuesday in a report on three espionage campaigns against telecoms, governments and critical infrastructure ...

Sandbox design that uses static analysis to forcibly block direct localStorage access and global pollution by module-assigned ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Scala plugin 2026.3 is here! This release brings more accurate Scala 3 code analysis, substantially reworked Twirl support for Play Framework developers, and more efficient compiler-based highlighting ...

npm 12 now blocks install scripts by default, closing the lifecycle hook that fueled major supply chain attacks on developer ...

Having AI write code and being able to incorporate changes with peace of mind. There are still several verification tasks in ...