Vulnerabilities
Claude Code Extension Trojanized on Cursor Marketplace
Trojanized Claude Code extension on Cursor's marketplace pushed an SSH backdoor to 5,000 developers. Anthropic says its own systems weren't touched.
claude code
CyberROI coverage tagged “claude code”.
AI
AI Coding Agents Can Be Turned by a File in Downloads
A planted AGENTS.md in a developer's Downloads folder nearly made OpenAI's Codex install malware. The guardrails are cheap; most teams lack them.