InfoQ

VS Code 1.123 Adds Two-Hour Extension Update Delay to Limit Supply Chain Attacks

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Chrome is removing the last workaround keeping Manifest V2 ad blockers alive

Chrome 150, due June 30, removes the last developer flag keeping Manifest V2 ad blockers like uBlock Origin alive.
Ars Technica

Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code

The controversy over vibe coding reached a new high this week after a developer added hidden instructions to his open source Java testing app to sabotage projects performed by AI coding agents. The ...
Infosecurity-magazine.com

GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension

GitHub has confirmed that a recent breach into its internal repositories was caused by a vulnerability in a Microsoft Visual Studio Code (VS Code) extension called ‘Nx Console.’ The security team at ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
Infosecurity-magazine.com

GitHub Confirms Breach of Internal Repositories Via Malicious VS Code Extension

The Microsoft-owed software developer platform, GitHub, has confirmed a third-party has gained unauthorized access to 3800 internal repositories. The breach was detected on May 19 and likely comes ...
Windows Report

GitHub Confirms Breach After Malicious VS Code Extension Exposed 3,800 Repositories

GitHub has confirmed that thousands of its internal repositories were breached after an employee installed a malicious Visual Studio Code extension. The incident adds to growing concerns around supply ...
The Verge

Microsoft starts canceling Claude Code licenses

Thousands of Microsoft developers will use GitHub Copilot CLI instead Thousands of Microsoft developers will use GitHub Copilot CLI instead is a senior correspondent and author of Notepad, who has ...
Ars Technica

Anthropic tested removing Claude Code from the Pro plan

Anthropic caused a stir among developers with what appeared to be a surprise change to its pricing plan: The company signaled that Claude Code, the popular agentic development tool, would no longer be ...
KBTX

College Station City Council votes to remove Pebble Creek Parkway extension from comprehensive plan

COLLEGE STATION, Texas (KBTX) - College Station City Council voted Thursday night to remove the future extension of Pebble Creek Parkway from the city’s comprehensive plan after more than two hours of ...
TechCrunch

Anthropic took down thousands of GitHub repos trying to yank its leaked source code — a move the company says was an accident

Anthropic accidentally caused thousands of code repositories on GitHub to be taken down while trying to pull copies of its most popular product’s source code off the internet. On Tuesday, a software ...
Wall Street Journal

Anthropic Races to Contain Leak of Code Behind Claude AI Agent

WSJ’s Kate Clark demonstrates how Anthropic’s new Cowork tool can help non-coders automate their lives–or at least attempt to. Photo: Claire Hogan/WSJ Anthropic is racing to contain the fallout after ...