The Hacker News

Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets

Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across developer systems.
Windows Report

Visual Studio Code Update Brings End-to-End Web Debugging and AI Control

Visual Studio Code 1.112 introduces in-editor web app debugging, Copilot Autopilot mode, and improved AI workflows for developers.
UC San Diego Today

A UC San Diego Tool Teaching Code to 25 Million is Even More Critical in Age of AI

UC San Diego cognitive scientist Philip Guo created Python Tutor, a free tool that makes code “visible” step by step. The research behind it earned a Test of Time award, recog ...
InfoWorld

I ran Qwen3.5 locally instead of Claude Code. Here’s what happened.

You can now run LLMs for software development on consumer-grade PCs. But we’re still a ways off from having Claude at home.

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
The Hacker News

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...