A malicious version of Anthropic’s Claude Code extension was discovered in the Cursor marketplace, attempting to install persistent SSH backdoors on Windows and macOS systems.
Malicious versions of Anthropic's Claude Code extension were briefly available in the Cursor marketplace, attempting host reconnaissance and reverse SSH tunneling.
Alpine Linux has rebuilt its GitLab server and reset all passwords after attackers targeted a critical remote code execution vulnerability in its development infrastructure.
Polymarket is refunding $2.7 million to 726 traders after a hijacked third-party script allowed hackers to steal cryptocurrency funds.
Attackers successfully compromised 42 third-party GitHub repositories by embedding malicious payloads too large to be detected by standard GitHub search and API paths. The sophisticated campaign targets AI coding assistants and IDEs, activating malware when
