Microsoft Visual Studio Code seems to have botched the fix for CVE-2020-16881, a "remote code execution" vulnerability regarding "malicious package.json files". The patch can be trivially bypassed. A thread 🧵
Wednesday means another week of Grumpy Hackers! Tonight at 9:15 EST (in about 40 minutes) on twitch.tv/grumpyhackers I can’t imagine what news we could talk about. The last week has been very boring....