keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...

A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned . The ...

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

#9303 opened on Jun 22 by André Mathisen (Anzure) 2 of 14 tasks 6 feat (vscode): Add codeful sdk resolution from local nuget packages, remove old dependencies pr-validated VSCode #9295 opened on Jun ...

All notable changes to CodeGraph are documented here. Each entry also ships as a GitHub Release tagged vX.Y.Z, which is where most people will look. This project follows Keep a Changelog and adheres ...

This is the OSS PR summary for 2026-08-05. The JST check time is `2026-08-05T06:24:14+09:00`, and the targets are `microsoft/fluentui-blazor`, `microsoft/fluentui`, `microsoft/aspire`, ...