吴说获悉，慢雾科技首席信息安全官 @im23pds 发文提醒，近期备受关注的朝鲜黑客针对开发者的攻击方式，其实早在 7 个月前就已出现在 GitHub 仓库“VSCode-Backdoor”中。该攻击手法涉及朝鲜相关人员利用虚假招聘信息引诱开发人员。一旦开发者打开恶意的 VS Code 项目，隐藏任务会自动运行，从 Vercel 获取 JavaScript ...

Note: jsrun is under development. Expect breaking changes between minor versions. One of the most compelling use cases for jsrun is building safe execution environments for AI agents. When LLMs ...

Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, recommend extensions that are non-existent in the OpenVSX registry, allowing ...