Postman's desktop client has been found to silently rewrite the local configuration files of Claude Code and Codex at startup, injecting a remote MCP plugin and writing a trust record to bypass authorization prompts. The anomaly surfaced through authentication errors…
A developer opened the Postman desktop app, version 12.33.4, on a Mac on October 24. According to the GitHub issue they filed the next day, Postman's own log then recorded this: If you run Claude Code or Codex on a machine that…
Opening Postman on October 24 installed its plugin into two coding agents the user never asked it to touch — Codex and Claude Code — and the installer's own code then wrote the trust record for its own startup hook. No API data…
Linus Torvalds has posted the first release candidate for version 7.4 of the Linux kernel and offered his opinion that the project has found a “much healthier model” for using AI. He therefore hopes that the unusually large number of commits…
Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was distributed on its own VS Code extension marketplace. This version was not developed by Anthropic and contained malicious code intended to install an SSH…
Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs). Anthropic's official Claude Code extension for the Cursor VS Code Marketplace was hijacked and swapped out for a malicious version with…
Cursor Finds Fake Claude Code Extension That Could Let Hackers Access Your Computer, 5,000 Users At Risk (AI-generated) SpaceX-owned coding platform Cursor has revealed that it found a harmful extension on its marketplace that may allow hackers to get the personal…
According to a blog post from Cursor, the company has found a fake version of Anthropic’s Claude Code extension on the Cursor VS Code extension marketplace. The malicious extension goes by the name Anthropic.claude-code version 2.1.313 and was available between…
Oct 30 (Reuters) – Cursor, the coding-tool company owned by SpaceX, said on Friday that a maliciously modified version of Anthropic’s Claude Code extension was available on its Cursor VS Code extension marketplace on Thursday, affecting up to 5,000 users. • Cursor said the…
v 2.1.313 of the Cursor Marketplace Claude Code extension contains malware The official Claude Code extension in the Cursor marketplace was compromised today. Yes, you heard that right. A malicious version, 2.1.313 was published to the Cursor Marketplace, today, October 29th, 2026. The extension…
Bugs and vulnerabilities in AI-written code, AI pull requests swamping open-source projects, AI code review and slop in repositories.
An article joins this feed when it matches these terms. Each one is also a search of its own.