Expo published Exact, an open-source runtime that compiles a small interface language into native views on Apple platforms ...

Compare the best code security review tools of 2026 for pull requests and CI. See how Endor Labs and 8 others review ...

Sandbox design that uses static analysis to forcibly block direct localStorage access and global pollution by module-assigned ...

The failure of users dropping off due to sloppy Math.random() written by AI, and the incentive ledger engine polished by dual ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

CopperDragon malware supplier may link five Chinese hacking groups, Check Point Research said Tuesday in a report on three espionage campaigns against telecoms, governments and critical infrastructure ...

Cursor removed a compromised Claude Code extension from its marketplace on October 29. This came after researchers found out ...

How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Researchers have developed NuWebKit, an open web-based simulation framework that combines artificial intelligence code ...

npm 12 now blocks install scripts by default, closing the lifecycle hook that fueled major supply chain attacks on developer ...