「IntelliJ IDEA」のJava/Kotlin機能をLSP化、「Visual Studio Code」などにも開放

蘭JetBrainsは8月4日（現地時間）、「Visual Studio Code」向けの拡張機能「Java & Kotlin by IntelliJ IDEA」をプレビュー公開した。「Open VSX ...
Microsoft

ChainDrop supply chain compromise: Anatomy of a self-propagating worm

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

合計月間インストール数20億回超の人気npmパッケージ群を狙った大規模サプライチェーン攻撃が発生

JavaScript向けパッケージ管理サービス「npm」で、広く使われている数百個のパッケージに認証情報を盗むマルウェアが混入される大規模なサプライチェーン攻撃が発生しました。セキュリティ企業のAikido ...
SecurityWeek

Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack

More than 400 NPM packages have been infected with the Mini Shai-Hulud worm in the ChainDrop supply chain attack.

The Shai-Hulud npm worm didn't fake its security check — it earned a legitimate one

A hijacked GitHub account let the Shai-Hulud worm pass npm's trust check, spreading through packages with 2 billion monthly ...
cybernews

Another massive NPM worm: 444 packages with 2 billion monthly downloads infected with malware

Malware infected at least 444 npm packages spanning 2,000 versions, threatening software with over two billion monthly installs. Attackers compromised maintainer Jared Wray's account, then used stolen ...
Tech Times on MSN

BSides Las Vegas AI track warned of agentic worm risk the day before ChainDrop hit

BSides Las Vegas 2026 spent three days making the case that AI coding tools are supply chain attack targets. ChainDrop, a ...
PCMag

Sick of AI Answers in Safari? I Just Vibe Coded a Solution, and You Can Too

Forget sketchy third-party extensions. You can now build them safely, easily, and entirely on your own with Apple's Describe ...