A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to ...
A tampered version of the official Claude Code extension was briefly distributed through Cursor's own marketplace with an SSH ...
A tampered version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for over 11 hours ...
A grey market service hijacks Codex and Claude Code settings, routing company data and credentials through its servers across ...
On October 29, 2026, the AI code editor Cursor announced that version 2.1.313 of the "Anthropic.claude-code" extension, ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls ...
I installed the optional Windows 11 update KB5127936 (build 26300.9818) in a VM and compared before and after: context menu, ...
A cryptocurrency mining campaign has resurfaced on Hugging Face shortly after its earlier accounts were removed, using fake ...