npm 12 now blocks install scripts by default, closing the lifecycle hook that fueled major supply chain attacks on developer ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

Cloudflare is tackling corporate security risks from AI-generated code with Void, a new open-source self-hosted platform ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

IntroductionWithin one day of starting to use Claude Code, I was able to create an Instagram Reel illustrating the basics of ...

Cursor removed a compromised Claude Code extension from its marketplace on October 29. This came after researchers found out ...