TeamPCP Supply Chain Attack: How npm Poisoned GitHub
TeamPCP's three-stage supply chain cascade hit TanStack, Nx Console, and GitHub's 3,800 repos in 6 days. Here's what happened and what you must ...
JFrog 2026: Supply Chain Surge 451% — AI Now a Vector
JFrog’s 2026 report finds malicious npm packages up 451%, with AI agent skills and Hugging ...
Google Jules Pro: Async Coding Agent vs Cursor Now
Google launched Jules Pro at I/O 2026 this week. Here's what changed, when the async ...
Kotlin Gets Official VS Code Support — Here’s What Changed
JetBrains shipped an official Kotlin VS Code extension at KotlinConf 2026. Backed by IntelliJ'\''s engine, ...
Cursor 3.3: Parallel Agents and PR Review Are Live Now
Cursor 3.3 ships Build in Parallel, Split PRs, and a native PR review tab. Here’s ...
Exchange Zero-Day CVE-2026-42897: One Email Owns Your OWA
An attacker sends one email. The victim opens it in Outlook Web Access. No attachment, no macro, no second click. Arbitrary JavaScript executes ...
Zed Terminal Threads: Keep Claude Code Before June 15
Zed 1.3.5 ships Terminal Threads — the only way to use Claude Code in Zed ...
Laravel-Lang Supply Chain Attack: 700 Repos Poisoned — Rotate Now
A supply chain attack rewrote 233 Laravel-Lang Composer package versions via Git tag manipulation. If ...
Quasar Linux RAT Targets Developer Credentials: Check Now
The QLNX Linux RAT targets developer dotfiles — npm tokens, AWS keys, kubeconfig — with ...
C# Union Types Land in .NET 11: No More OneOf Hacks
C# 15 ships the union keyword in .NET 11 Preview 4. After years of OneOf ...