The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

The leak has now been fixed. According to the Open VSX team, the incident has been fully contained and closed since October ...

The biggest stories of the day delivered to your inbox.

Also of importance are a Kerberos vulnerability in Active Directory, a Visual Studio Copilot extension, and a Microsoft ...