The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.

Mozilla is building cq - described by staff engineer Peter Wilson as "Stack Overflow for agents" - as an open source project ...

North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...

Attackers have hijacked 75 of 76 GitHub Actions tags for Aqua Security's Trivy scanner, distributing credential-stealing ...

The open-source supply chain hack represents “meaningful industry-wide risk”, according to an industry expert.

Everything you may have missed from the past week.

As AI automates procedural tasks across industries, creativity, communication, and tenacity emerge as the critical hiring criteria for every organization LOS ANGELES, March 20, 2026 /PRNewswire/ -- ...

The consensus among early adopters is that Anthropic has successfully internalized the most desirable features of the ...

In a move clearly designed to strengthen its position among developers, OpenAI has acquired Python tool maker Astral. The house of Altman expects the deal to strengthen the ecosystem for its Codex ...

OpenAI Group PBC today announced plans to acquire Astral Software Inc., a startup with a set of widely used Python ...

OpenAI announced Thursday that it has entered into an agreement to acquire Astral, the company behind popular open source Python development tools such as uv, Ruff, and ty, and integrate the company ...

Lookout Threat Labs, and iVerify published coordinated research in March 2026 on DarkSword, a JavaScript-based full-chain ...