Atuin Threads syncs coding-agent sessions across machines
From Atuin 18.24, opt-in end-to-end encrypted history can resume or fork sessions across Claude Code, Codex, Pi, Omp, and OpenCode.
1
Stories per day · 30 days
12 RSS
Relatedsupply-chain18anthropic16cursor14coding-agents12ssh-backdoor10codex8developer-tools8prompt-injection8vscode7npm5open-vsx5ai-agents4claude4credential-theft4github4openai4agentic-ai3artex3
137 stories, newest first · one card per story
Stories tagged #claude-code
Claude Code permission file leaks secrets on public GitHub
GitGuardian counted 31,088 distinct secrets across 23,276 repositories, including 5,343 still valid when found.
1
Resend CEO explains why coding agents recommend its email API
In one study Claude Code ranked Resend first in 64 of 102 extractable email recommendations.
1
Claude Code permission file exposes secrets in 1,122 public GitHub copies
Apiiro found 1,379 secrets, including database passwords and AWS keys; one notified company confirmed a live key.
4
Hacker News thread on a year after a 100% AI mandate
The feed snippet shows 49 points and 51 comments and does not include the post body.
StealthyPoison poisons third-party skills to mislead LLM agents
Payloads built with one surrogate transferred unchanged to three held-out models and succeeded in a Claude Code workflow using Opus 4.8.
Claude Code leaks user email addresses via User-Agent headers
Claude Code includes user email addresses in HTTP User-Agent headers during web searches, raising privacy concerns despite a privacy plugin.
Cursor: malicious Claude Code extension with SSH backdoor live 11 hours
Versions 2.1.312 and 2.1.313 collected host data and tried a reverse SSH tunnel; Cursor says most logins failed.
1
Malicious Claude Code extensions on Cursor planted an SSH backdoor
Cursor says versions 2.1.312 and 2.1.313 were available from about 2:27 AM to 1:35 PM PDT on October 29.
1
Tampered Claude Code Cursor extension plants a persistent SSH backdoor
Versions 2.1.313 and 2.1.312 were served for hours on October 29; Microsoft says VS Marketplace and npm were not affected.
3
Malicious Claude Code extension reached up to 5,000 Cursor users
A marketplace backdoor stayed live about 11 hours, but a design flaw stopped it on most devices.
1
Trojanized Claude Code extension for Cursor hit developers
Malicious version 2.1.313 stole data and, in a minority of cases, could give persistent privileged access.
1
Tampered Claude Code extension in Cursor marketplace stole host data
Cursor says the listing was live about eleven hours and may have reached 5,000 users before the marketplace was taken offline.
Tampered Claude Code extension on Cursor planted an SSH backdoor
Version 2.1.313 was downloadable for about 11 hours and could have reached up to 5,000 developers; official Anthropic channels were not affected.
1
Unauthorized relays disable Codex and Claude Code sandboxes at 12 firms
A post-install script points the genuine CLIs at relay servers, swaps API keys, and sets danger-full-access; abuse has not been observed.
1
Malicious Claude Code extension on Cursor planted SSH backdoors
Version 2.1.313 was listed for about 11 hours on October 29 and may have reached 5,000 developers.
1
Claude Code VS Code extension reportedly compromised on Open VSX
The oss-security note says the Microsoft Visual Studio Marketplace copy was allegedly not affected, but the post is incomplete.
Poisoned Claude Code extension on Open VSX planted an SSH backdoor
Version 2.1.313 was on Cursor’s marketplace for about 11 hours; Cursor says at most 5,000 users were affected.
1
Backdoors claimed in official Claude Code VS Code and Cursor extensions
The linked post body did not load, so only the title states the backdoor claim.
Backdoored Claude Code 2.1.313 shipped to VS Code and Cursor
The build tried to plant a persistent SSH reverse tunnel before Anthropic replaced it with 2.1.314.
4
Malicious Claude Code VS Code extension installed an SSH backdoor
Cursor says at most 5,000 users got version 2.1.313 on October 29; Anthropic replaced it with 2.1.314.
4
Grey-market relays reroute Codex and Claude Code traffic
Symantec says lookalike-domain scripts disable sandboxes and send prompts, files and tokens through operator servers at about a dozen firms.
13
Trojanized Claude Code extension on Open VSX installs an SSH backdoor
Version 2.1.313 beacons to 134.209.82.225 and plants an Ed25519 key; Anthropic’s Microsoft Marketplace build is not implicated.
1
Malicious Claude Code extension on Open VSX plants an SSH backdoor
OpenSourceMalware says anthropic.claude-code 2.1.313 adds an SSH key, reverse tunnel, and startup scripts; Anthropic’s official release is not shown compromised.
1