Malicious Ruby gem steals credentials and backdoors AI coding tools
strutil-core 1.0.1 was live about five hours; revoking a stolen GitHub token can wipe the home folder.
Stories per day · 30 days
1 RSS
Relatedinfostealer2ai-restriction1anthropic1aokigahara1claude1cloud-credentials1copilot1credential-theft1cursor1embedded-browser1goldman-sachs1miasma1prompt-injection1rubygems1supply-chain1testmetest1vs-code1
5 stories, newest first · one card per story
Stories tagged #ai-coding-tools
Goldman Sachs restricts Claude Code from most traders and bankers
Internal October guidance limits Anthropic's Claude Code and Microsoft GitHub to engineers only after productivity and risk review.
Researchers find 'Embrace' embedded-browser flaws in five AI coding tools; Codex and VS Code unpatched
Flaws in Codex and VS Code remain unpatched; Cursor silently fixed code execution and GitHub fixed Copilot spoofing in 1.1.29.
1
Aokigahara infostealer collects AI coding-tool tokens and cloud credentials
Check Point says it searches local app storage rather than exploiting a flaw in the targeted AI assistants.
2
AI is adding to the review load on open-source projects, many of them thinly funded
ACM Technology Policy Council authors warn AI-generated code is overwhelming thinly funded open-source maintainers, raising software supply chain security risks.
3