Supply chain attack compromises the popular rand-user-agent scraping NPM package to deploy and activate a backdoor.

Attackers had added malicious code to the rand-user-agent package, which is used for automatic tests and web scraping, among other things.

Microsoft's Visual Studio Code 1.100 April 2025 release significantly enhances AI Chat with customizable instruction and ...