Parameter Labs published a writeup on October 28, 2026 saying a public ChatGPT share link could run attacker JavaScript as ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and ...

OpenCode is a free, open-source AI coding agent. At first glance, it may look like another Claude Code alternative, but there ...

A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...

Draw Things released Local Code, an open-source AI assistant for Mac, in a post dated October 28, 2026. MacRumors reported on ...

The developers of Draw Things have launched Local Code, an open-source AI assistant that lets Mac users download models and ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...