🚨 SlowMist TI Alert 🚨 The Mini Shai-Hulud, Miasma, and Hades malware family, now expanding beyond npm into the Go module ecosystem. Affected Go modules: is a Cosmos SDK-based Layer 1 blockchain project for decentralized trust and verifiable registry infrastructure. The compromised repository contains obfuscated payloads under .claude/, execution logic in .claude/setup.mjs and .vscode/setup.mjs, and VS Code/AI assistant workflow hooks that may trigger payload execution when the repository is opened. This is not a traditional Go build-time compromise. The risk lies in source-repository and developer-environment abuse through IDE automation, AI hooks, and hidden workspace configuration. Security teams should avoid opening untrusted repositories with IDE automation enabled, audit .claude and .vscode files, and rotate any potentially exposed developer, cloud, repository, and CI/CD credentials. Special thanks to @SocketSecurity for the excellent discovery. As always, stay vigilant!

⚡ VS Code shipped a wave of updates for agents and the editor this month! 🔍 Review multi-file changes at a glance in the Agents window.
 📝 Edit Markdown files alongside agent feedback with the hybrid editor.
 🎙️ Built-in dictation in chat, editors, and the terminal.
 ✨ Plus the Modern UI preview, terminal accessibility improvements, and much more. 📖 Read the full changelog: Happy coding! 💙

🐍 Debug Python Like a Pro in VS Code with @madebygps Explore breakpoints, variable inspection, the call stack, watch expressions, and GitHub Copilot in a real debugging workflow. Happy coding! 💙