The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.
Parameter Labs published a writeup on October 28, 2026 saying a public ChatGPT share link could run attacker JavaScript as ...
About this articleThe afternoon session of the Registered Information Security Specialist exam includes questions that ...
OpenCode is a free, open-source AI coding agent. At first glance, it may look like another Claude Code alternative, but there ...
A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...
Draw Things released Local Code, an open-source AI assistant for Mac, in a post dated October 28, 2026. MacRumors reported on ...
The developers of Draw Things have launched Local Code, an open-source AI assistant that lets Mac users download models and ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...
According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...
Polymarket said a third-party provider was compromised. Researchers found wallet-draining code in a DebugBear-associated ...