A tampered version of the official Claude Code extension was briefly distributed through Cursor's own marketplace with an SSH ...

On October 29, it was discovered that version '2.1.313' of what claimed to be the Claude Code VS Code extension contained ...

North Korean hackers hijack developer credentials to inject malware into trusted software projects, compromising downstream ...

Vulnerabilities in the built-in browsers of five AI coding tools were disclosed on October 29 as "EMBRACE." As of October 30, ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

A grey market service hijacks Codex and Claude Code settings, routing company data and credentials through its servers across ...

Software supply chain attacks are a practical risk for any organisation that builds, buys, or runs software. The issue is not limited to open source packages. It also includes source control, build ...

Cursor reported on October 29, 2026 that a maliciously modified build of the Claude Code extension, Anthropic.claude-code 2.1.313, was available in its extension marketplace and tries to install a ...

Unit 42: a Zhuhai operator ran DeepSeek inside Hermes Agent against 460+ targets. Zero autonomous wins; manual work took data ...

Anthropic, OpenAI, Cloudflare and Google ship AI agents that find, verify and patch code bugs. How they compare.

The startup's 46-page report tested 11 agent platforms against 13 security requirements, finding only its own system met all ...

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...