Parameter Labs published a writeup on October 28, 2026 saying a public ChatGPT share link could run attacker JavaScript as ...

OpenCode is a free, open-source AI coding agent. At first glance, it may look like another Claude Code alternative, but there ...

A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...

Draw Things released Local Code, an open-source AI assistant for Mac, in a post dated October 28, 2026. MacRumors reported on ...

The developers of Draw Things have launched Local Code, an open-source AI assistant that lets Mac users download models and ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...

Polymarket said a third-party provider was compromised. Researchers found wallet-draining code in a DebugBear-associated ...

A script associated with performance monitoring contains code to access trading sessions, sell positions, and redirect assets ...

AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still ...