Here's how Axios npm was compromised

GitHub Copilot inserted advertisements in pull requests

GitHub Copilot inserted ads promoting Raycast, Slack, Teams and itself in more than 11000 pull requests.

Technically, these were not ads but just "tips" by Copilot, as the raw data included a hidden HTML comment, "START COPILOT CODING AGENT TIPS."

This "bug" was introduced on March 24, when Copilot's abilities were expanded. Martin Woodward blamed it on a "programming logic issue" and tips have now been turned off permanently.

🧑‍💻 @agamtechtricks

Your first look at the iOS 27 ColorOS 17

So the ColorOS 17 screenshots are just fake images, made by designer on Weibo

That's a relief now.

Telegram will let users know whether the user they are interacting with uses an unofficial client and thus their messages sent to them may be less secure.

Learn more about the other features in the latest update here: https://telegram.org/blog/ai-editor-mighty-polls-and-more

Follow @TechLeaksZone

RIP Samsung Messages

Samsung is discontinuing its official Messages app in July, 2026 and is urging users to shift to Google Messages as their default messaging app.

Note: Users of an older Android versions (Android 11 or lower) are not affected by this End Of Service.

Follow @TechLeaksZone

YouTube removed NVIDIA DLSS 5 trailer due to copyright!

La7, an Italian television channel has used footage from Nvidia DLSS 5 Trailer and then sent a copyright strike to every YouTube video that supposedly used “their footage”, including Nvidia themselves. YouTube then simply took down Nvidia’s own DLSS 5 announcement video.

The Content Detection System of YouTube is so broken that anyone can simply claim ownership of any video on YouTube and the company would still issue a copyright notice to the original maker

Follow @TechLeaksZone

Google is upgrading the AI Pro Plan of Google One that comes with 2TB storage to 5TB storage free of cost for everyone.

Your existing Al benefits and bill will stay exactly the same - we just wanted to give you some more space for your photos, documents and more.

You don't need to do anything to claim it; the extra storage is already available in your account.

Note: The offer is only applicable for the AI Pro Plan and not the Premium plan which only offers 2TB storage.

Check your mails!

Follow @TechLeaksZone

LinkedIn is secretly injecting code and scanning 6,000+ browser extensions without consent

Everytime a user visits LinkedIn, malicious JavaScript is injected which scans the browser for installed extensions, without any notice and consent. This information is then stored at their servers and also sent to HUMAN Security, an American-Israeli cybersecurity firm.

The code downloads list of 6,222 extensions and detects each one of them. This has affected approx. 405 million people. Every extension is then matched to the (logged in) user. This is not mentioned anywhere in their privacy policy or any public document.

LinkedIn scans for:
• 762 LinkedIn-specific tools
• 209 sales & prospecting competitors
• 509 job search extensions
• VPNs, ad blockers, security tools
• Religious & Political extensions
• Disability & neurodivergence tools

LinkedIn knows which organization is using what tools by detecting what tools are installed by employees of that organization.

🔗 BrowserGate | Response
🧑‍💻 @agamtechtricks

LinkedIn has responded by saying that the claims are "plain wrong," and that:

To protect the privacy of our members, their data, and to ensure site stability, we do look for extensions that scrape data without members’ consent or otherwise violate LinkedIn’s Terms of Service

So, this means they are scanning extensions, doesn't it? Quite interesting, considering the list of these extensions is not published anywhere by LinkedIn.

🔗 YCombinator
🧑‍💻 @agamtechtricks