Anthropic hacked to deliver remote access trojan(doublepulsar.com)

361 points by bashtoni 3 days ago | 73 comments

Kevin Beaumont's DoublePulsar post reporting that a compromised Claude Code VS Code/Cursor extension version 2.1.313 installed an SSH reverse backdoor on developer machines.

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace(phorion.io)

950 points by _chall 3 days ago | 542 comments

Phorion security advisory analyzing a backdoored Claude Code for VS Code extension (v2.1.313) on the Cursor Marketplace that installs a persistent reverse SSH backdoor.

All your OpenCodes belong to us(johncodes.com)

33 points by jpmcb 9 months ago | 7 comments

The Cloudflare outage might be a good thing(gist.github.com)

221 points by radeeyate 11 months ago | 153 comments

Ghrc.io appears to be malicious(bmitch.net)

352 points by todsacerdoti 1 year ago | 58 comments

Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.

Ken Shirriff Tracks Down Intel's Infamous Pentium FDIV Bug in the Silicon Itself(hackster.io)

24 points by voxadam 1 year ago | 8 comments

Anthropic hacked to deliver remote access trojan(doublepulsar.com)

361 points by bashtoni 3 days ago | 73 comments

Kevin Beaumont's DoublePulsar post reporting that a compromised Claude Code VS Code/Cursor extension version 2.1.313 installed an SSH reverse backdoor on developer machines.

Claude Code can debug low-level cryptography(words.filippo.io)

446 points by Bogdanp 1 year ago | 199 comments

Filippo Valsorda's blog post on using Claude Code to debug his new Go implementation of the ML-DSA post-quantum signature algorithm.

The cult of vibe coding is dogfooding run amok(bramcohen.com)

541 points by drob518 6 months ago | 454 comments

Bram Cohen blog post arguing that the leaked Claude source code's poor quality reflects vibe coding dogfooding taken to cult-like extremes.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

Issue: Claude Code is unusable for complex engineering tasks with Feb updates(github.com)

1252 points by StanAngeloff 7 months ago | 686 comments

GitHub issue on anthropics/claude-code reporting that Claude Code became unusable for complex engineering tasks after the February model updates.

Claude Code Found a Linux Vulnerability Hidden for 23 Years(mtlynch.io)

351 points by eichin 7 months ago | 226 comments

Blog post by Michael Lynch describing how Anthropic researcher Nicholas Carlini used Claude Code to find remotely exploitable Linux kernel bugs, including one hidden for 23 years.