While the Windows maker did not attribute the activity to a specific threat actor, the use of VS Code tasks and Vercel ...

Exposed Google API keys previously not considered secrets can now inadvertently grant attackers access to sensitive Gemini ...