Fake Open VSX extensions expose developer environments

A coordinated campaign involving 77 counterfeit extensions on the Open VSX Registry exposed sensitive information about developer machines, Git repositories and continuous integration environments, highlighting a growing software supply-chain risk around code-editor plugins. The extensions appeared between July 26 and August 1 and impersonated legitimate tools available through the Visual Studio…

thearabianpost.com ·2026-08-10

We haven't written up this one. Arabian Post has the full story — the link below goes straight to it.

Read the original at thearabianpost.com →

More in Tech

Clicks’ Power Keyboard brings BlackBerry-style typing to any phone — with some compromises

Clicks’ $99 Power Keyboard brings a customizable, slide-out physical keyboard to MagSafe and Qi2 smartphones, but its added heft can make larger phones awkward to use

Clicks Technology launches Power Keyboard for $99
Designed for various phone sizes with BlackBerry-like typing
Teaser for upcoming Clicks Communicator smartphone

2026-08-10 ·techcrunch.com

I built a Spotify killer that fills in my self-hosted music library automatically

Reverb turned my self-hosted music setup into something I actually use every day.

2026-08-10 ·xda-developers.com

Recovery Key storage transition hightlights Apple’s privacy and obscurity

We trust Apple with a lot of our data. In general, that hasn’t seemed like a bad idea; in particular, compared to its competitors, Apple seems to ensure that it can inspect or interact with very…

2026-08-10 ·sixcolors.com

Atlassian closes one-click Rovo data leak flaw

Atlassian has fixed a security flaw in its Rovo artificial intelligence assistant that could have allowed attackers to turn a single malicious link into a channel for stealing sensitive corporate…

Atlassian patched RovoBlast flaw in Rovo AI assistant.
Attackers could steal data via malicious link and RovoChatPrompt.
Atlassian released server-side fix July 8, no separate patch needed.

2026-08-10 ·thearabianpost.com

GitHub broadens Dependabot defence against malicious packages

GitHub has expanded Dependabot malware alerts across major open-source package ecosystems, widening automated protection against compromised and deliberately malicious software dependencies beyond the…

2026-08-10 ·thearabianpost.com

OnePlus begins ColorOS 17 testing on flagship phones

OnePlus has opened closed beta testing of ColorOS 17 for the OnePlus 15 and OnePlus 15R in India, putting its planned transition away from OxygenOS into the hands of users for the first time.

OnePlus starts ColorOS 17 beta testing on OnePlus 15 and 15R in India
300 applicants narrowed down to top scorers for firmware access
ColorOS 17 based on Android 17, focusing on performance and stability

2026-08-10 ·thearabianpost.com