An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

VS Code can use LLM models other than GitHub Copilot’s built-in providers for AI-assisted development, including local and ...

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories ...

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

Kallithea - Source code management system that supports two leading version control systems, Mercurial and Git, with a web interface. Klaus - Simple, easy-to-set-up Git web viewer that Just Works.

A metadata commons to store research software metadata - arash77/research-software-ecosystem-content ...