Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
GitHub

Curate, Annotate, and Manage Your Data in LightlyStudio.

Runs on Python 3.9 to 3.14 on Windows, Linux and MacOS. We recommend Python 3.10 for the best compatibility with plugins such as SAM autolabeling. Run python example_coco.py and open the printed URL ...
EdSurge

Vibe Coding Sparked a Love of Reading in My Classroom

Vibe coding is a practice where people use AI tools to generate software code by describing what they want in plain language to the tool, with little to no traditional programming knowledge required.
GitHub

CloudEdge / CloudPlus / Meari — Home Assistant Integration

A Home Assistant custom integration for CloudEdge / CloudPlus / Meari battery-powered Wi-Fi cameras. These cameras are sold under many brand names (CloudEdge, CloudPlus, Meari, ieGeek, etc.) and all ...
The Hacker News

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

Microsoft has announced that Visual Studio Code (VS Code) will apply a two-hour delay before extensions for the integrated development environment (IDE) are updated automatically to a newer version in ...
SecurityWeek

VS Code Vulnerability Allows One-Click GitHub Token Theft

A security researcher has disclosed details of a severe Visual Studio Code (VS Code) vulnerability that can be exploited to steal a user’s GitHub token and access their repositories. The vulnerability ...
Bleeping Computer

VS Code zero-day lets hackers steal GitHub tokens in one click

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...