Claude Code

Reported Context (250)

that the attacker then handed to an attack agent. The attacker also redirected the coding agents Claude Code and Codex to an abliterated model, though they mostly did infrastructure work. Cursor, another coding Researchers Say BOSSAI AI Agents Helped a Taiwan-Based Attacker Steal Taipei Dispatch Records
Claude Code Leaking Secrets Across Nearly Two Thousand Public GitHub Repositories Researchers Find 2,539 Secrets in Public Repositories Containing Claude Code Configurations
When you tell Claude Code “Yes, and don’t ask again,” it saves the approved command word for word, password included. Apiiro Finds 2,539 Secrets in Public Repositories Containing Claude Code Settings
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. Apiiro Finds Secrets in 1,122 Public Claude Code Settings Files
Trojanized Claude Code extension: On October 29, a trojanized Claude Code extension was shipped from Cursor's own mirror of the Open VSX registry. Cursor's mirror can carry different versions than Open VSX itself, so OpenSourceMalware Show #28 Covers Claude Code, Binance, Polymarket and PolinRider

CVE (113)

Malware (159)

People (199)

Threat Actors (121)

MITRE ATT&CK (189)

Vendors (202)

Products (642)

Tools (221)

Industries (111)

Countries (59)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.