GitHub's Internal Repositories Compromised Through Malicious VS Code ExtensionPremiumPoisoned VS Code extension led to internal repo access; reinforces dev-tool supply-chain risk.May 22·thehackernews.com
OpenAI Responds to TanStack Supply Chain BreachPremiumTwo OpenAI employee devices were compromised; credential material stolen from code repositories. No user data or production systems affected.May 18·securityweek.com
Critical SQL Injection Vulnerability in LiteLLM Exposes Cloud CredentialsCritical pre-auth SQL injection in LiteLLM openly exploited in the wild, exposing cloud credentials.Apr 29·cybersecuritynews.com