Nx supply chain attack on Aug 26, 2025 leaked 2,349 secrets via npm packages, risking GitHub and cloud accounts.

OpenAI has updated its Codex AI coding agent with a new VS Code extension, GPT-5 power, and automated GitHub pull request reviews for a unified developer experience.

VS Code flaw lets attackers reuse deleted extension names, enabling ransomware payload delivery and supply chain risks.

Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages ...

Attacks on the NX build system and React packages highlight escalating threats to enterprise software development pipelines.