In a new study, Vite is the most popular JavaScript tool, nearly surpassing webpack in usage. Only two percentage points separate them.
Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.