A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
On October 21, 2026, Node.js released v22.23.4, v24.22.1, and v26.12.1, which fix 10 vulnerabilities. The most severe, CVE-2026-111497, is a flaw in the processing of Brotli compressed data; if a Node ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...