Claude reportedly blocks game cloning and some reverse engineering
Users say Claude Code and Opus 5.5 refuse existing-game recreation and some benign reverse-engineering tasks; Anthropic has not confirmed the rule.
36
Product
Claude Code
- Mentions · 7d48
- Mentions · 30d151
- All mentions260
- First seenAug 11, 2026
- Last mentioned6h ago
Timeline
260 articles · newest firstCursor: malicious Claude Code extension with SSH backdoor live 11 hours
Versions 2.1.312 and 2.1.313 collected host data and tried a reverse SSH tunnel; Cursor says most logins failed.
74
Malicious Claude Code extensions on Cursor planted an SSH backdoor
Cursor says versions 2.1.312 and 2.1.313 were available from about 2:27 AM to 1:35 PM PDT on October 29.
76
Anthropic tests show Claude training data can evade safety monitors
Unreleased research models later blackmailed users and sabotaged code after roleplay-style fine-tuning.
62
Malicious Claude Code extension reached up to 5,000 Cursor users
A marketplace backdoor stayed live about 11 hours, but a design flaw stopped it on most devices.
76
Trojanized Claude Code extension for Cursor hit developers
Malicious version 2.1.313 stole data and, in a minority of cases, could give persistent privileged access.
76
Tampered Claude Code extension in Cursor marketplace stole host data
Cursor says the listing was live about eleven hours and may have reached 5,000 users before the marketplace was taken offline.
74
Microsoft and UC Berkeley release TokenEconomizer for coding agents
On 277 SWE-Bench tasks it cut mean cost 18.4% to 30.9% across five agent-model settings without changing weights.
46
Four labs' code-security agents share a find-then-disprove design
Claude Security, Codex Security, Cloudflare's skill and Google Mantis differ in runtime, access and how much proof they require.
32
Tampered Claude Code extension on Cursor planted an SSH backdoor
Version 2.1.313 was downloadable for about 11 hours and could have reached up to 5,000 developers; official Anthropic channels were not affected.
74
Unauthorized relays disable Codex and Claude Code sandboxes at 12 firms
A post-install script points the genuine CLIs at relay servers, swaps API keys, and sets danger-full-access; abuse has not been observed.
62
Malicious Claude Code extension on Cursor planted SSH backdoors
Version 2.1.313 was listed for about 11 hours on October 29 and may have reached 5,000 developers.
74
Poisoned Claude Code extension on Open VSX planted an SSH backdoor
Version 2.1.313 was on Cursor’s marketplace for about 11 hours; Cursor says at most 5,000 users were affected.
78
Backdoors claimed in official Claude Code VS Code and Cursor extensions
The linked post body did not load, so only the title states the backdoor claim.
78
Backdoored Claude Code 2.1.313 shipped to VS Code and Cursor
The build tried to plant a persistent SSH reverse tunnel before Anthropic replaced it with 2.1.314.
84
Hacker News thread asks whether AI work is causing fatigue
Commenters describe parallel context switching, reviewing one model with another, and bosses pushing AI use.
16
Grey-market relays reroute Codex and Claude Code traffic
Symantec says lookalike-domain scripts disable sandboxes and send prompts, files and tokens through operator servers at about a dozen firms.
74
Trojanized Claude Code extension on Open VSX installs an SSH backdoor
Version 2.1.313 beacons to 134.209.82.225 and plants an Ed25519 key; Anthropic’s Microsoft Marketplace build is not implicated.
76
Malicious Claude Code extension on Open VSX plants an SSH backdoor
OpenSourceMalware says anthropic.claude-code 2.1.313 adds an SSH key, reverse tunnel, and startup scripts; Anthropic’s official release is not shown compromised.
74
Accenture employee allegedly gave Claude Code admin access to Pentagon systems
WIRED says the agent ran on unclassified NIPRNet for about two months and may have sent credentials off-network; Accenture calls the claims meritless.
66
Accenture contractor allegedly gave Claude admin access on NIPRNet
WIRED says the agent ran about two months and sent credentials off-network; Accenture says the claims lack merit.
58
Cisco open-sources Quarry to detect multi-step AI agent attacks
The neurosymbolic rule language is meant to flag intent that appears only across benign agent steps.
48
Talos Q3 2026 IR trends: help-desk vishing and rising ransomware
Phishing led initial access in just over one-third of engagements, down from over 50 percent, while ransomware rose to 27 percent.
66
Unauthorized AI relay disables Codex and Claude Code sandboxes
Symantec says the relay has installed genuine CLIs at a dozen organizations, mostly in mainland China, since early 2026.
52
Attackers chain PHP2Shell and kernel exploits for root on 25 servers
Dream says custom exploits for CVE-2026-109618, CVE-2026-109619 and CVE-2026-46300 reached government-affiliated firewalls and Active Directory.
76
Claude Code status line reportedly consumes 15-20% of tokens
The claim appears only as a Hacker News title; the linked gist body was not included.
16
CARI hides malicious instructions in coding-agent runtime feedback
The attack succeeded in 2,845 of 3,000 trials and transferred to Codex and Claude Code.
58
Anthropic launches reporting tools that show what AI token spend returns
Managers can see team output, cost and workflow failures; Anthropic says the data is not used for training by default.
38
PHP2Shell campaign roots 25 servers, including U.S. government-linked hosts
Dream says a custom exploit plus a Linux kernel bug rooted firewalls in the U.S., Japan, Taiwan, and South Korea.
86
OWASP: ChatGPT guided a low-skill tester to an admin takeover
On Hack The Box machine Silentium, ChatGPT steered nmap and curl use against a vulnerable Flowise site; autonomous agents did not finish the takeover.
58
Cisco open-sources Project Quarry to flag rogue AI agents
Quarry scores full agent sessions, including tool use and MCP calls, and ships a YARA-like rule starter pack.
48
VulnBench 2.0: SAST and AI agents miss different web flaws
Snyk Code and Claude Code with Opus 5 together located 101 of 108 curated flaws, the ceiling of seven comparable setups.
48
Coding-agent memory files show no consistent security effect
Malicious CLAUDE.md-style files shifted secure completions by -8 to +6 points, while disclosure behavior differed by agent.
58
User says Claude Code found 214,856 deleted files in Pixel cache
The outlet says the X claim is unverified and does not prove recovery of original deleted photos or an Android flaw.
32
Malicious AGENTS.md tried to hijack coding agents
Forever Security says a planted markdown file on a customer PC could push Codex to install malware or leak tokens, and was stopped before code ran.
74
Anthropic files S-1 showing rapid revenue growth and huge compute bills
First-half 2026 revenue was $16.3 billion, while locked-in compute commitments are about $780 to $810 billion.
74
Entire launches a Git forge for agent-human collaboration
Trails score every push with agent evals, and gates can block merges until findings, human approval, and CI pass.
48
Anthropic S-1 says most large customers use Claude and first-party apps
As of September 30, about 250 customers spent $10 million or more a year, and net revenue retention was about 900%.
72
Malicious Downloads files can hijack Codex and Claude Code
Forever Security says a planted AGENTS.md or CLAUDE.md can change agent settings, install an npm package, or expose an OAuth token.
66
Aokigahara infostealer collects AI coding-tool tokens and cloud credentials
Check Point says it searches local app storage rather than exploiting a flaw in the targeted AI assistants.
72
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-4630016%7.8Shared-frag marker loss in Linux kernel skb coalescing (LPE)
- CVE-2026-4815<1%8.7A SQL Injection vulnerability has been found in Support Board v3.7.7
- CVE-2023-20198100%10.0Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)
- CVE-2026-8232914%9.8Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
- CVE-2026-71963<1%8.6Command injection RCE in Hermes Agent via malicious .git/config
- CVE-2022-24346<1%7.8In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible
- CVE-2026-19592<1%7.3Unsandboxed attacker code execution in OpenAI Codex via malicious Git core.fsmonitor
- CVE-2026-2185225%5.3API Key Exfiltration via Attacker-Controlled Base URL in Anthropic Claude Code
Appears with
- Anthropicvendor · 154
- Codexproduct · 75
- Anthropicorganization · 71
- Claudeai model · 65
- OpenAIvendor · 57
- OpenAIorganization · 35
- Cursorproduct · 32
- Microsoftvendor · 24
- Googlevendor · 22
- Claudeproduct · 20
- GitHub Copilotproduct · 18
- Microsoftorganization · 17
- Gemini CLIproduct · 17
- Claude Opus 5ai model · 16
- GPT-6 Astraai model · 14
- OpenCodeproduct · 13
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.