微软发布 TypeScript 7.0，这是该语言首个搭载其研发已久的原生编译器的稳定版本。该编译器将 TypeScript 工具集移植到了 Go 语言。据开发团队称，在完整的构建过程中，该版本通常能带来 8 倍至 12 倍的速度提升。

A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.

keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Microsoft has released the final version of TypeScript 7.0. Unlike previous TypeScript versions, the compiler is no longer based on JavaScript/Node.js but has been reimplemented almost one-to-one in ...

The Microsoft-led TypeScript 7.0 features an order-of-magnitude speed boost, a victory not only for TypeScript itself but also for Go, the programming language used to completely rewrite the web ...

Ammar Askar dropped a proof of concept (PoC) exploit for a Visual Studio Code (VS Code) flaw within just an hour of disclosing it to “an old contact” at the open source platform, according to his ...

今年我把市面上热门插件全部实测一遍，筛选出20+款稳定可靠、真正提效、无坑无广告的必备工具。 2026年了，还在用“裸奔”的VSCode写代码？ 作为程序员的“第二桌面”，VSCode的强大，一半来自本身，一半来自插件。 今年我把市面上热门插件全部实测一遍 ...

Drift has revealed that the April 1, 2026, attack that led to the theft of $285 million was the culmination of a months-long targeted and meticulously planned social engineering operation undertaken ...

A supply chain attack campaign is spreading invisible malicious code across GitHub, npm, and the VS Code extension marketplace, with more than 151 compromised repositories identified so far. According ...

Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collectively downloaded more than 128 million times could be exploited to steal local ...

Anthropic has launched a beta integration that connects its fast-growing Claude Code programming agent directly into Slack, allowing software engineers to delegate coding tasks without leaving the ...