Everything you may have missed from the past week.

The last release with a JavaScript codebase is ready. From version 7, the compiler and language service will be written in the Go programming language.

The newly observed malware abuses VS Code’s “runOn:folderOpen” feature to execute automatically from trusted projects, ...

Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide. This analysis walks through the Trivy supply‑chain compromise, attacker ...