Visual Studio Marketplace is the latest supply chain attack vector

Aqua Security researchers have found that hackers are using Visual Studio Marketplace to conduct supply chain attacks.

In a new report, the researchers uncovered that attackers could impersonate popular VS Code extensions to trick developers into downloading malicious versions.

VS Code is the most popular IDE, with around 74.48 percent of developers using it. The vast array of extensions available for VS Code is partly what drives its popularity.

Here are some...

GitHub Copilot will enable developers to code using their voice

A new GitHub Copilot feature will enable developers to code using their voice.

Copilot was introduced last year and uses AI to help speed up mundane coding tasks by suggesting how to complete lines.

Behind the Copilot feature is an AI model developed by OpenAI called Codex. OpenAI claims that Codex has a broad knowledge of how people use code and is “significantly more capable than GPT-3” in generating code.

Microsoft-owned GitHub announced at its annual...

2021 Stack Overflow Survey: React.js takes the web framework crown, Python is in-demand, and devs still love Rust

The 2021 edition of Stack Overflow’s developer survey features both substantial changes in the landscape while other elements have remained stubbornly resilient.

In a blog post, Stack Overflow’s Ben Popper and David Gibson wrote:

“This year’s survey was a little different than ones in years past. We opened our 2020 survey in February, and by the time we got around to publishing the results, the reality of work and daily life had shifted dramatically for people...

Gitpod adds support for VS Code and expands features after raising $13M

Open-source developer platform Gitpod has announced a slew of enhancements after raising $13 million in venture capital funding.

The platform – which is used by over 350k global developers – aims to streamline workflows by providing prebuilt, collaborative browser-based development environments.

Stephen O'Grady, Principal Analyst with RedMonk, commented:

"While developers have a wealth of tools at their fingertips, integrating them all together and...