A vulnerability in the extension publishing mechanism of Open VSX could have allowed attackers to tamper with any repository.

Google brings its new open-source AI agent directly into developers' terminals for an improved command-line experience.