npm 12 now blocks install scripts by default, closing the lifecycle hook that fueled major supply chain attacks on developer ...

AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Drop-in agent skills evolve quickly. Yet 26 percent of the 31,132 public skills analysed in a January 2026 study carried at ...

A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...

The scalable web crawling and scraping library for JavaScript/Node.js. Enables development of data extraction and web automation jobs (not only) with headless Chrome and Puppeteer. - ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...

Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was ...