According to Socket, the extensions (complete list here) are published under five distinct publisher identities – Yana ...

Anthropic last month reduced the TTL (time to live) for the Claude Code prompt cache from one hour to five minutes for many requests, but said this should not increase costs despite users reporting ...

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

The design flaw in Flowise’s Custom MCP node has allowed attackers to execute arbitrary JavaScript through unvalidated ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar ...

Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found ...

Nearly 2,000 internal files were briefly leaked after ‘human error’, raising fresh security questions at the AI company ...

Claude Code, the AI-powered helper for writing computer code, has become popular in recent months. The company announced on ...

A new White House app promises direct access to the administration, but its data collection and app behavior raise some ...

Would you like a closer look at Claude? Someone at Anthropic has some explaining to do, as the official npm package for ...