A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...
A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
On October 29, 2026, the AI code editor Cursor announced that version 2.1.313 of the "Anthropic.claude-code" extension, ...
A cryptocurrency mining campaign has resurfaced on Hugging Face shortly after its earlier accounts were removed, using fake ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
Fake ChatGPT and Claude desktop apps on GitHub use signed OpenAI and Anthropic executables to load Yoba malware and a ...
Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency ...
Yoba использует аватар Telegram-канала для вычисления нового домена управления, а в исследованных образцах загрузчик запускал ...
Load/Mine infetta server GPU tramite modelli Hugging Face, mentre Yoba sfrutta falsi ChatGPT e Claude per distribuire malware ...