InfoQ

Google Launches Colab CLI for Developers, Automation, and AI Agents

Google has announced the Google Colab CLI, a command-line tool that allows developers and AI agents to interact with remote ...

Visual Studio finally gets long-awaited feature that developers will love

Microsoft finally delivers a Visual Studio feature developers have been requesting for years, eliminating a long-standing ...
InfoQ

Run Untrusted AI Agent Code Safely with Azure Container Apps Sandboxes

Microsoft has announced the public preview of Azure Container Apps Sandboxes. This new ARM resource type is ...

GitHub disables Microsoft repos pushing password-stealing malware

Microsoft removed 73 repositories across its Azure, microsoft, Azure-Samples, and MicrosoftDocs organizations on GitHub, ...
Redmondmag.com

Supply Chain Attack Hits Microsoft GitHub Repos, AI Coding Tools

GitHub disabled 73 Microsoft repositories on June 5 after a malicious commit landed in an Azure project, in what researchers described as a supply chain attack aimed at developer workstations and AI ...

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...
GitHub

Supabase Agent Skills

Agent Skills to help developers using AI agents with Supabase. Agent Skills are folders of instructions, scripts, and resources that agents can discover and use to do things more accurately and ...
techtimes

GitHub CISO Names Nx Console as Root of 3,800-Repo Breach: OpenAI, Grafana Also Hit

GitHub CISO Alexis Wales confirmed Thursday that a poisoned build of the Nx Console Visual Studio Code extension — live on Microsoft's official Visual Studio Marketplace for just 18 minutes on May 18 ...
Geeky Gadgets

New Open-Source Plugin Turns Complex Repositories Into Interactive Maps

Better Stack examines how the open source plugin Understand-Anything simplifies navigating complex codebases by turning repositories into interactive, queryable knowledge graphs. Combining static code ...
usaherald

Microsoft’s Sudden AI Reversal Sparks Internal Chaos as Thousands Lose Access to Popular Claude Code Tool Amid Copilot Push

Microsoft’s aggressive push into artificial intelligence has taken a dramatic turn, and thousands of employees are now caught in the middle of a growing internal shakeup that is raising serious ...
Bleeping Computer

GitHub links repo breach to TanStack npm supply-chain attack

GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack.
Infosecurity-magazine.com

GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension

GitHub has confirmed that a recent breach into its internal repositories was caused by a vulnerability in a Microsoft Visual Studio Code (VS Code) extension called ‘Nx Console.’ The security team at ...