Treat this as an immediate security incident, CISOs advised; researchers say it’s one of the most sophisticated supply chain ...

Microsoft said its Visual Studio Code 1.7 release overloaded the npmjs.org JavaScript package management service for Node.js, forcing a rollback to version 1.6.1. (Update: After this article was ...