Backdoored Claude Code 2.1.313 shipped to VS Code and Cursor
The build tried to plant a persistent SSH reverse tunnel before Anthropic replaced it with 2.1.314.
84
Product
Visual Studio Code
- Mentions · 7d3
- Mentions · 30d17
- All mentions33
- First seenSep 1, 2026
- Last mentioned21h ago
Timeline
33 articles · newest firstGitHub launches Copilot Fusion to route and combine coding models
Fusion is generally available on all Copilot plans, bills each model at its normal rate, and offers a 30% discount through November 30, 2026.
48
GitHub launches Copilot Fusion to route coding work across models
Paid Copilot users get a 30% Fusion discount through November 30, 2026, while High and Max can use more credits.
52
GhostAction plants font-disguised stealer in 94 GitHub repositories
Phishing via my-github.com steals GitHub passwords, 2FA, and OAuth tokens, then a VS Code task runs a credential stealer.
64
VS Code before 1.136.2 bypasses Workspace Trust (CVE-2026-81376)
A prepared workspace can reach an attacker service and run code as the user; Microsoft fixed it and paid the reporter $4,000.
68
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction hid credential-stealing Node.js malware in fake font files across 94 GitHub repositories.
76
Vani ships a preview coding agent extension for VS Code
The free Marketplace extension shows file edits as diffs and runs commands only after approval.
24
Vibe Coding VS Code Extension Monitors All Developer Activity
Akamai reports a Vibe Coding VS Code extension that monitors all developer activity.
Akamai Blog40
DarkBlinders Hackers Use Fake Meeting App to Deploy Backdoor and Steal Government Data
DarkBlinders used a fake StarkMeet app and GitHub to backdoor systems and steal Kurdistan government data.
72
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
A ThreatsDay roundup covers GlassWorm VS Code themes, VulcanRAT207, a Qilin extradition, and a rogue Gentlemen affiliate.
58
Hackers Use Web3 and Blockchain C2 to Hide Supply Chain Attacks Targeting Cloud Credentials
Unit 42 says the ChainDrop npm worm uses Ethereum smart contracts as C2 to steal cloud and developer credentials.
79
ChainDrop and PolinRider Use Blockchain C2 to Steal Cloud and CI/CD Credentials
ChainDrop and North Korea-linked PolinRider use blockchain C2 to steal cloud and CI/CD credentials.
78
GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware
GlassWorm-linked VS Code theme extensions hide downloaders that fetch Windows malware, including a blockchain-addressed in-memory loader.
78
Warlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical Infrastructure
Warlock ransomware operators still exploit unpatched SharePoint flaws to hit water, telecom, government, and university targets.
78
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
Warlock is exploiting SharePoint flaws to disable defenses and deploy ransomware against critical infrastructure and government targets.
81
Warlock ransomware breach SharePoint in water, telecom operator attacks
Warlock ransomware exploited SharePoint ToolShell flaws to hit a water utility, telecom, government body, and university.
78
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
Warlock ransomware operators continue exploiting unpatched SharePoint servers at critical infrastructure, government, and education targets.
80
WSL containers are generally available on Windows
Microsoft made WSL containers generally available with Intune controls and Defender for Endpoint visibility.
42
Microsoft is rolling out Linux container support to WSL
Microsoft made Linux container support in WSL generally available, with Defender and Intune controls.
34
OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
An OpenAI Codex user says one task spawned 826 agents and burned about $79,000 without authorization.
58
Bug: Border radius has infected VSCode editor
A VS Code issue reports unwanted border-radius styling spreading through the editor UI.
3
North Korean Attackers Hit 30,000 Devices and Steal $10.7m
North Korea's WaterPlum infected about 30,000 devices and stole roughly $10.7 million in cryptocurrency.
82
North Korean WaterPlum Hackers Infect 30,000 PCs via Fake Job Interviews, Steal $10.7M Crypto
North Korean WaterPlum actors posed as recruiters to infect 30,000 developers' PCs and steal $10.7M in cryptocurrency via BeaverTail, InvisibleFerret and other malware.
78
North Korean WaterPlum hackers infected 30,000 devices worldwide
Joint US, Japan, Australia, Germany advisory links North Korean WaterPlum group to 30,000 infected devices and $10.7 million in stolen cryptocurrency.
78
North Korean WaterPlum Hackers Target IT Professionals With Fake Job Interviews to Steal Crypto
North Korean WaterPlum actors used fake job interviews to infect 30,000 devices and steal crypto from 7,000+ wallets, netting roughly $10.71 million.
76
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Mandiant says an attacker hijacked an AI coding-assistant session at a SaaS provider and spread the Shai-Hulud worm across roughly 100 repositories, stealing secrets.
62
Hackers Use Fake LinkedIn Job Offers to Infect Developers With New Cross-Platform RATs
Iran-linked Mirage Kitten uses fake LinkedIn job challenges to deliver new cross-platform RATs NodeRabbit and PollCat to developers in fintech, aviation, and aerospace.
55
Iran-Linked Hackers Use Fake LinkedIn Job Offers to Deploy NodeRabbit and PollCat RATs
Iran-linked Mirage Kitten targets software engineers with fake LinkedIn recruiter coding tests deploying new NodeRabbit and PollCat RATs.
72
Microsoft’s Project Zenith puts large AI models directly on developer PCs
Microsoft's Project Zenith delivers a ready-to-code Windows 11 experience running 30B+ parameter AI models locally on 64GB+ unified-memory PCs, starting with AMD Ryzen AI Halo.
55
Microsoft’s Project Zenith is a ‘distraction-free Windows experience’ for developers
Microsoft branded its developer-optimized Windows setup Project Zenith, with 64GB+ memory devices from AMD that run 30B+ parameter AI models locally.
45
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Malicious .git core.fsmonitor configs let attacker code run in AI coding agents like Claude Code and Codex; four of eight flaws remain unpatched.
68
Iranian Hackers Pose as Recruiters to Deliver Cross
Kaspersky attributes new cross-platform RATs NodeRabbit and PollCat to Iranian group Nimbus Manticore, spread via recruiter-themed LinkedIn lures.
55
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
77 malicious 'evil twin' Open VSX extensions impersonated developer tools and exfiltrated hostnames and detailed workspace reconnaissance to mangorbit.com.
40
Related CVEs
by mentions- CVE-2025-1055<1%5.6A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to…
- CVE-2025-53770100%9.8Unauthenticated Deserialization RCE in Microsoft SharePoint Server on-premises
- CVE-2026-561641%9.8Missing Authentication in Microsoft SharePoint Server Allows Privilege Escalation
- CVE-2026-5864416%9.8Unauthenticated Deserialization RCE in Microsoft SharePoint Server
- CVE-2026-81376<1%9.6Security Feature Bypass in Microsoft Visual Studio Code
- CVE-2026-71963<1%8.6Command injection RCE in Hermes Agent via malicious .git/config
- CVE-2022-24346<1%7.8In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible
- CVE-2026-55607<1%7.7Claude Code: Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox…
- CVE-2026-19592<1%7.3Unsandboxed attacker code execution in OpenAI Codex via malicious Git core.fsmonitor
- CVE-2025-53771100%6.5Improper Authentication in Microsoft SharePoint Server Enables Network Spoofing
Appears with
- Microsoftvendor · 19
- Microsoftorganization · 8
- GitHubvendor · 6
- npmproduct · 5
- Warlockmalware · 4
- StoatWafflemalware · 4
- Storm-2603threat actor · 4
- OtterCookiemalware · 4
- InvisibleFerretmalware · 4
- Claude Codeproduct · 4
- OtterCandymalware · 4
- BeaverTailmalware · 4
- Symantecorganization · 4
- GitHub Copilotproduct · 4
- Longlegsthreat actor · 4
- WaterPlumthreat actor · 4
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.