Enabling administrators to revoke VSTS access tokens

As promised in the Protecting our users from the ESLint NPM package breach blog post last week, we have deployed new REST APIs to allow administrators of Visual Studio Team Services (VSTS) organizations to centrally revoke Personal Access Tokens (PAT) and JSON Web Tokens (JWT) created by users in their organizations. We’ve reviewed our system telemetry and... Read More

2 Comments

Adopting the word “organization”

In our interactions with users, we see a lot of confusion over the word account. Currently we use account to mean things like https://contoso.visualstudio.com and things like admin@contoso.com. To avoid this confusion, and to better align with the terminology of the broader developer and OSS community, we will be adopting the word organization in Visual... Read More

7 Comments

Protecting our users from the ESLint NPM package breach

On the 12th of July 2018, malicious code was detected in two popular open-source NPM packages, eslint-scope (version 3.7.2) and eslint-config-eslint (version 5.0.2). As a result, developers who downloaded and installed these packages may have had credentials stored in their .npmrc file compromised. This may include credentials required to access package feeds hosted in Visual Studio Team Services. ... Read More

16 Comments

Azure DevOps Projects general availability

During our Connect(); 2017 event, we announced the public preview of Azure DevOps Projects to help customers start running applications on any Azure service in just three steps. Today, we’re excited to announce that Azure DevOps Projects is now generally available in the Azure Portal, making it easier for developers to deploy to the Azure cloud and create CI/CD pipelines... Read More

2 Comments

Universal Packages bring large, generic artifact management to VSTS

Until now, Package Management has hosted packages that are part of a development ecosystem: NuGet packages for .NET development, npm packages for Node.js and web frontend development, and Maven packages for Java development. We’re also continuing to expand our support for new development ecosystem, with support for Python’s PyPI packages and more in the coming months. However,... Read More

11 Comments