A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...
A script associated with performance monitoring contains code to access trading sessions, sell positions, and redirect assets ...
AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still ...
The Coruna iOS exploit kit now ships with a DarkSword iOS 18 chain on 608 domains. zLabs breaks down its delivery, native ...
CVE-2026-65105 is 8.1 High, patched 25 August 2026. Oasis Security showed one webpage could rewrite a NemoClaw model's chat ...
A new Bun preload script stops Claude Code from sending agent transcripts to Opus every 30 seconds for three-word status ...
Drop-in agent skills evolve quickly. Yet 26 percent of the 31,132 public skills analysed in a January 2026 study carried at ...
Cloudflare is tackling corporate security risks from AI-generated code with Void, a new open-source self-hosted platform ...
Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results