Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was ...
Malicious tensorlake npm version 0.5.144 contained a Shai-Hulud worm that harvests credentials and can republish compromised packages.
A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...
This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us ...
Hello, this is Monolab.I am an ordinary office worker challenging myself with a side hustle using AI, and I am documenting ...
Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development ...
Playden for PS5 lets users sign in to Steam, install games and launch each one from its own home screen tile, though ...