A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

Hello, this is DreamTact DX Solutions.One week after the emergency PHP update, a critical vulnerability has been discovered in 'Brotli,' a data compression mechanism created by Google.You might think, ...

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

I am really missing the extension ecosystem.

ThreatsDay: Malicious VS Code themes, npm supply-chain attacks, AI phishing, ransomware betrayal, exposed hacker tools, and ...

TeamPCP, the threat actor behind the recentsupply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI as ...