
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
Brightscript Pro Kit
Advanced tools
Affected versions:
Language support for Roku's BrightScript language. With improved VS Code support.
The popular BrightScript Language extension for VSCode is used by thousands of Roku developers around the world. Revolutionize your Roku development workflow by using this powerful tool.
The extension is packed with features, but here are some highlights:
logrendezvous is enabled on the Roku device.
For a full list of features and settings, please see our documentation website, or click one of the links below.
launch.jsonlaunch.jsonbs_const values from the launch.jsonThe majority of this extension's language feature support depends on the BrighterScript project, which contributes the language server. The debugging functionality comes from the roku-debug project. If you would like to contribute please see our contributing guide
Click here to see the changelog.
FAQs
Language support for Roku's BrightScript language. With improved VS Code support.
We found that Brightscript Pro Kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.