A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in dependency folders
Google has released a Chrome security update to fix three zero-day vulnerabilities, including a high-severity flaw with an active exploit
