DARK SECRETS: 5 - The Real Truth

Google Accepted 6,000 Gemini CLI Contributions, Then Closed Tool for Enterprise Only

Google spent nearly a year accepting code contributions from hundreds of independent developers on an open-source AI terminal tool — then on May 19, 2026, announced it would withdraw API access from all non-paying users and hand the project's future exclusively to enterprise customers, while replacing it with a closed-source…

International Business Times · May 23

500 Poisoned Packages, Hundreds of Companies: TeamPCP's Worm Just Reached GitHub

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate approximately 3,800 of GitHub's internal source code repositories — everything from platform infrastructure to proprietary tooling built by the company that hosts more than 420 million repositories for over 180 million developers…

International Business Times · May 23

Retro enthusiast injects Snake game into vintage S3 graphics card VBIOS — enjoy some serpentum fun while your old PC boots

A retro PC enthusiast has modified the VBIOS of a vintage graphics card to embed a version of Snake – the game everyone used to play on their dumb phones.

Tom’s Hardware · May 23

Hacker group hits 3,800 internal GitHub repositories via poisoned developer plugin — TeamPCP claims source code theft and attempts $50,000 sale, employee installed malicious VS Code extension

GitHub has confirmed a breach involving roughly 3,800 internal repositories after an employee device was compromised through a malicious VS Code extension. The TeamPCP hacker group claims it stole internal source code and attempted to sell the data for at least $50,000.

Tom’s Hardware · May 20

CISA contractor apparently leaked 'highly sensitive' government AWS keys on Github

The leak was so bad, researchers initially thought it was a joke.

TechRadar · May 19

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? Full explainer on npm malware spread

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? A new npm supply chain attack hit hundreds of packages linked to the @antv ecosystem. Attackers used a compromised maintainer account to publish malicious versions that stole credentials and spread across repositories. Microsoft and…

The Economic Times · May 19

Fans secretly mapped 24 terabytes of Minecraft’s infamous 2b2t server, million‑square‑block archive to be shared via torrent — Intense digital archaeology project has taken years, risked player wrath

A digital gaming archaeology project has archived 24TB of data, preserving a million squared block of Minecraft’s infamous 2b2t server.

Tom’s Hardware · May 19

'Please stop submitting AI slop code': team behind popular PS3 emulator call time on user submitted vibe coding

"This wastes maintainer time and, in worse cases, such changes get merged and break functionality for all users."

PC Gamer · May 19

Microsoft's "ironic" GitHub Copilot logo sparks controversy

"No AI" is a strange flex for an AI bot.

Creative Bloq · May 19

Your new Steam Controller will not work with the Xbox app and PC Game Pass unless you use third-party software on Windows

Game Pass titles from the Xbox PC app can't communicate properly with Valve's new controller via Steam Input, an issue that's currently only fixed with fan-made apps.

Windows Central · May 18