The GitHub Copilot SDK turns the Copilot CLI into a cross-platform agent host with Model Context Protocol support.
A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.