GoKawiil
Trivy under attack again: Widespread GitHub Actions tag compromise secrets
(news.ycombinator.com)
1.
2.
VSCode IDE forks expose users to "recommended extension" attacks
(bleepingcomputer.com)
3.
Glassworm malware returns in third wave of malicious VS Code packages
(bleepingcomputer.com)
4.
GlassWorm malware returns on OpenVSX with 3 new VSCode extensions
(bleepingcomputer.com)
5.
The zero-day that could've compromised every Cursor and Windsurf user
(bleepingcomputer.com)