MYSTERIOUS: 5 | Mind Blowing Facts

500 Poisoned Packages, Hundreds of Companies: TeamPCP's Worm Just Reached GitHub

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate approximately 3,800 of GitHub's internal source code repositories — everything from platform infrastructure to proprietary tooling built by the company that hosts more than 420 million repositories for over 180 million developers…

International Business Times · May 23

Retro enthusiast injects Snake game into vintage S3 graphics card VBIOS — enjoy some serpentum fun while your old PC boots

A retro PC enthusiast has modified the VBIOS of a vintage graphics card to embed a version of Snake – the game everyone used to play on their dumb phones.

Tom’s Hardware · May 23

GitHub confirms breach — thousands of internal repositories hit after employee installs malicious VS Code extension

TeamPCP continues its attack on open source projects, now apparently asking for $50,000.

TechRadar · May 21

CISA contractor apparently leaked 'highly sensitive' government AWS keys on Github

The leak was so bad, researchers initially thought it was a joke.

TechRadar · May 19

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? Full explainer on npm malware spread

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? A new npm supply chain attack hit hundreds of packages linked to the @antv ecosystem. Attackers used a compromised maintainer account to publish malicious versions that stole credentials and spread across repositories. Microsoft and…

The Economic Times · May 19

Fans secretly mapped 24 terabytes of Minecraft’s infamous 2b2t server, million‑square‑block archive to be shared via torrent — Intense digital archaeology project has taken years, risked player wrath

A digital gaming archaeology project has archived 24TB of data, preserving a million squared block of Minecraft’s infamous 2b2t server.

Tom’s Hardware · May 19

'Please stop submitting AI slop code': team behind popular PS3 emulator call time on user submitted vibe coding

"This wastes maintainer time and, in worse cases, such changes get merged and break functionality for all users."

PC Gamer · May 19

Microsoft's "ironic" GitHub Copilot logo sparks controversy

"No AI" is a strange flex for an AI bot.

Creative Bloq · May 19

Your new Steam Controller will not work with the Xbox app and PC Game Pass unless you use third-party software on Windows

Game Pass titles from the Xbox PC app can't communicate properly with Valve's new controller via Steam Input, an issue that's currently only fixed with fan-made apps.

Windows Central · May 18

'The exact same issue that was reported to Microsoft by Google project zero is actually still present, unpatched': Chaotic Eclipse strikes again with another worrying Windows security flaw

A new Windows 11 bug called MiniPlasma was disclosed on GitHub, together with a PoC.

TechRadar · May 18