DeceptiveDevelopment poisons repos after stealing developer credentials
ESET says the group planted code on npm, PyPI, Packagist, Go modules, and extension stores from April to September 2026.
76
Product
Cursor
- Mentions · 7d13
- Mentions · 30d40
- All mentions70
- First seenAug 11, 2026
- Last mentioned15h ago
Timeline
70 articles · newest firstClaude Code VS Code extension reportedly compromised on Open VSX
The oss-security note says the Microsoft Visual Studio Marketplace copy was allegedly not affected, but the post is incomplete.
68
Poisoned Claude Code extension on Open VSX planted an SSH backdoor
Version 2.1.313 was on Cursor’s marketplace for about 11 hours; Cursor says at most 5,000 users were affected.
78
Backdoors claimed in official Claude Code VS Code and Cursor extensions
The linked post body did not load, so only the title states the backdoor claim.
78
Backdoored Claude Code 2.1.313 shipped to VS Code and Cursor
The build tried to plant a persistent SSH reverse tunnel before Anthropic replaced it with 2.1.314.
84
Researchers find 'Embrace' embedded-browser flaws in five AI coding tools; Codex and VS Code unpatched
Flaws in Codex and VS Code remain unpatched; Cursor silently fixed code execution and GitHub fixed Copilot spoofing in 1.1.29.
72
Fake ChatGPT and Claude apps on GitHub spread Yoba malware
Check Point says the two-month campaign sideloads a dropper through signed binaries; the payload seen so far is an XMRig miner.
68
Fake ChatGPT and Claude apps spread malware via signed binaries
Check Point’s Yoba loader fetched XMRig and can also retrieve other Windows executables or PowerShell.
74
Malware planted in 42 GitHub repos targets Claude, Gemini and Cursor
Hooks in .github/init.js run at session start; JFrog links the traps to the testmetest npm campaign.
76
Aokigahara stealer takes developer keyrings and AI assistant sessions
Check Point says the Windows malware also steals browser, VPN, wallet, and password-manager data from one endpoint.
56
Aokigahara infostealer steals ChatGPT, Claude, Codex, and Cursor logins
Check Point says the Windows stealer also grabs cloud, SSH, and browser secrets, not via flaws in those AI apps.
68
SpaceX locks in $40B GPU financing deal with Apollo
An Apollo entity will buy Nvidia Vera Rubin chips and servers, then lease them to SpaceX for about five years.
62
Aokigahara infostealer collects AI coding-tool tokens and cloud credentials
Check Point says it searches local app storage rather than exploiting a flaw in the targeted AI assistants.
72
Aokigahara infostealer targets browsers, cloud keys, and AI apps
Check Point says the stealer also grabs Claude, ChatGPT Desktop, Codex, Cursor, and cloud and Git credentials.
72
Attacker used DeepSeek to steal 5,200 Indian university records
Unit 42 says a weak administrator password, not a new software flaw, exposed the MongoDB holding student and staff data.
62
Unit 42: BUGSTER used DeepSeek V4 in India university data theft
The actor brute-forced a site and stole more than 5,200 student and faculty PII records, Unit 42 says.
64
SpaceX and Tesla form committees to discuss a merger
SpaceX reported $7.56 billion in Q3 AI-division revenue, mostly compute rental, while Tesla profits fell again.
32
BUGSTER used jailbroken AI to hit Indian universities, Unit 42 says
The actor dumped more than 5,200 student records and planned VoIP fraud, Wi-Fi cracking, and crypto reconnaissance.
72
SpaceX reports AI revenue growth and a return to profit
A cited filing put quarterly revenue at $14.6 billion, with 1.7 GW of neocloud compute and $19.6 billion in spending.
46
Datadog tests security rules on coding agents' secure code
Without rules, Sonnet 5, Composer 2.5, and GPT 5.5 all left IDOR flaws in a document portal.
46
Sphinx Git hook quizzes developers before agent code ships
Wrong answers block the push; skips via sphinx yolo are logged, and answers are not sent to the coding agent.
28
Your AI Agent Doesn’t Have MFA
Report says AI agents lack MFA and have already misused credentials and spread malware.
66
New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials
Symantec says infostealer Aoki now steals local sessions and credentials for ChatGPT, Claude, Codex, Cursor, and Gemini.
60
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
Aoki infostealer now steals Claude, ChatGPT, Cursor, Copilot, and Gemini credentials from developer machines.
58
New Aoki Infostealer Targets AI Coding Assistant Credentials
Symantec says the Aoki infostealer now steals API keys and sessions from AI coding assistants.
66
Show HN: I wrote an email app that accepts only one sender per inbox
Clova.email offers one-sender and temporary inboxes so a leaked address can be deleted without exposing a real mailbox.
18
[AINews] AI Engineer NYC: Gemini 4 Argon, Vals AI Benchmarks
Google made Gemini 4 Argon generally available, with independent benchmarks placing it near rival frontier models.
90
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
Employees are linking personal AI agents to corporate apps through OAuth, passwords, and API tokens, creating unmanaged identity risk.
46
REA: New AI-Powered Reverse Engineering Tool Supports Ghidra, Hopper, and Claude Code
Open-source REA connects AI coding agents to Ghidra, Hopper, and IDA for local binary reverse engineering.
44
AI agents in a stand-up call
Open-source Agent Standup turns Claude Code sessions into a live multi-agent stand-up at zero token cost.
22
REA Tool Connects Claude Code and Cursor to Ghidra and IDA Pro to Reverse Engineer Anything
Open-source REA connects Claude Code and Cursor to Ghidra and IDA for evidence-backed reverse engineering.
38
A16z’s Olivia Moore on the state of consumer AI
a16z partner Olivia Moore says consumer AI is still early, with revenue concentrated in prosumer tools.
36
Warden Stealer Malware Targets Claude, Codex, Grok and Cursor to Steal AI Agent Data
Warden Stealer, a Rust malware-as-a-service, harvests tokens and prompts from Claude, Codex, Grok, and Cursor.
78
Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)
SANS published two Python scripts that reconstruct OpenCode and Hermes AI agent activity for forensic review.
44
[AINews] Claude Haiku 5.5 — better than GPT-6 Luna at the same pricing
Anthropic released Claude Haiku 5.5, a cheaper small model priced to match GPT-6 Luna.
78
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
Compromised tensorlake npm 0.5.144 delivered the Shai-Hulud worm to steal secrets and spread to other packages.
73
AI Agent Gateway: Open-source tool keeps credentials out of agent configs
Tuskira's open-source AI Agent Gateway keeps credentials out of agent configs and enforces tool permissions.
48
Writing code by hand is over, forever
An engineer says Claude Opus 4.5 in Claude Code ended his 18-year habit of writing code by hand.
28
Hackers Are Turning Trusted Software Updates Into Credential-Stealing Malware
Supply-chain worms in npm packages, including Nx, steal developer credentials and can enlist local AI coding tools.
76
DeepKeep’s AI Lens flags coding agent data leaks and routes destructive commands for approval
DeepKeep released AI Lens to flag coding-agent data leaks and require approval for destructive commands.
42
Related CVEs
by mentions- CVE-2026-835488%10.0Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
- CVE-2026-8232914%9.8Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
- CVE-2026-8354910%7.8Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
- CVE-2026-71963<1%8.6Command injection RCE in Hermes Agent via malicious .git/config
- CVE-2022-24346<1%7.8In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible
- CVE-2021-4389113%7.8Visual Studio Code Remote Code Execution Vulnerability
- CVE-2026-55607<1%7.7Claude Code: Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox…
- CVE-2026-19592<1%7.3Unsandboxed attacker code execution in OpenAI Codex via malicious Git core.fsmonitor
- CVE-2026-72718<1%7.0goose is general-purpose AI agent that runs on your machine
- CVE-2026-35603<1%5.4Claude Code: Claude Code loaded the system-wide default configuration from C:\ProgramData\ClaudeCode\managed-settings.json without validating…
Appears with
- Claude Codeproduct · 32
- Anthropicvendor · 30
- OpenAIvendor · 23
- Codexproduct · 23
- Claudeai model · 15
- Claudeproduct · 14
- Anthropicorganization · 12
- OpenAIorganization · 11
- GitHub Copilotproduct · 11
- Geminiai model · 10
- Googlevendor · 10
- ChatGPTproduct · 9
- Gemini CLIproduct · 9
- Microsoftvendor · 7
- GitHubvendor · 7
- Geminiproduct · 6
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.