TL;DR: This Microsoft Visual Studio Professional 2026 + The Premium Learn to Code Certification Bundle is currently on sale ...

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

Preview of new companion app allows developers to run multiple agent sessions in parallel across multiple repos and iterate ...

Latest weekly update supports previewing videos in the image carousel, adds a Copy Final Response command to the chat context ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

Socket uncovers large-scale GitHub spam campaign abusing “Discussions” notifications Fake advisories with bogus CVEs trick ...

Hackers target GitHub developers with fake VS Code alerts and CVEs, using malicious links to steal data and deliver malware.

Everything you may have missed from the past week.

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible ...

Threat actors behind the campaign are abusing Microsoft Visual Studio Code’s trusted workflows to execute and persist malicious code. Threat actors behind the long-running Contagious Interview ...

So, you’re building a web app and trying to figure out if React or Vue.js is the way to go in 2026. It’s a big decision, and honestly, it can feel a bit overwhelming with all the options out there.

Please create an issue before adding a rating. Keep in mind that I work full-time. I'd LOVE to have more contributors. See the Contributing section below. yarn add -D ...