Open VSX bug misread scanner failures as clean results, letting malicious VS Code extensions go live before patch in v0.32.0.
In the GenAI era, code is a commodity, but alignment is not. Traditional review boards can't scale with AI-generated output.
Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results