A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.
India Today on MSN

GitHub suffers breach in internal code, hackers claim they have source code for sale

GitHub's source code is allegedly on sale online. Hackers claim that they will release it for free if they don't find a buyer ...

Quishing Surges 146% in Q1 2026 as Attackers Hide Behind the Code

QR code phishing is becoming hard to ignore as attacks grow rapidly. In the first quarter of 2026 alone, "quishing" ...
techtimes

Detecting Sensitive Data Leaks in Source Code: Ziyu Wang’s Machine Learning Approach to Securing Modern Development Pipelines

The widespread adoption of open-source and enterprise software has accelerated development velocity but also expanded the attack surface. Among the most pressing concerns is the unintentional exposure ...
InfoWorld

Self-propagating worm found in marketplaces for Visual Studio Code extensions

Treat this as an immediate security incident, CISOs advised; researchers say it’s one of the most sophisticated supply chain attacks they’ve seen, and it’s spreading. A month after a self-propagating ...
VentureBeat

Claude Code's source code appears to have leaked: here's what we know

VentureBeat made with Google Gemini 3.1 Pro Image Anthropic appears to have accidentally revealed the inner workings of one of its most popular and lucrative AI products, the agentic AI harness Claude ...
InfoWorld

Anthropic employee error exposes Claude Code source

A version of the AI coding tool in Anthropic's npm registry included a source map file, which leads to the full proprietary source code. An Anthropic employee accidentally exposed the entire ...
JD Supra

Moving Away From Open Source: Trends in Source-Available Licensing

Offering your software product under an open-source software (OSS) license has its advantages. By making the source code of your product available for redistribution and modification, and in many ...

Is Google quietly buying code from play store developers to train AI? Here's what it's offering

Reports suggest Google may be offering developers incentives to share Android app code as it seeks to strengthen its AI ...
ZDNet

This new Claude Code Review tool uses AI agents to check your pull requests for bugs - here's how

Anthropic launches AI agents to review developer pull requests. Internal tests tripled meaningful code review feedback. Automated reviews may catch critical bugs humans miss. Anthropic today announced ...
Wired

Vibe Coding Is the New Open Source—in the Worst Way Possible

Just like you probably don't grow and grind wheat to make flour for your bread, most software developers don't write every line of code in a new project from scratch. Doing so would be extremely slow ...
Visual Studio Magazine

Microsoft Reaches Second Milestone in Open-Source AI Editing for VS Code

Microsoft reached a second milestone in its plan to make Visual Studio Code an open-source AI editor, continuing the transition it first outlined earlier this year. The latest update open sources the ...