安全研究人员发现，Anthropic 的 Claude Code VS Code 扩展被恶意篡改，版本 2.1.313 被发布到 Open VSX 注册表。这个恶意版本在正常代码前插入了一个加载器，能够在用户无需启动对话的情况下，自动向用户的 SSH ...

10 月 29 日，Cursor 从其应用市场中移除了一个被入侵的 Claude Code 扩展。此前研究人员发现，这些恶意扩展安装了 SSH 后门。估计有 5,000 名用户可能受到影响。该问题不涉及 Anthropic 的 AI 模型 ...

Cursor 下架了该扩展，并暂时关闭扩展市场，以审查其他扩展并轮换访问密钥。它还与托管服务提供商合作，使攻击者的服务器下线，从而中断反向 SSH 连接和数据传输。Cursor 表示，内部调查未发现其他版本的扩展或官方分发渠道受到影响的证据。

Dify is a tool that allows you to build generative AI applications on a screen while minimizing the amount of code you need ...

But there may be cases where you will want to start using htmx without annotating objects, at least at first (for instance, ...

A typing game can run with just a single HTML file. I created an initial version (81 lines) in 30 seconds and made three revisions to reach the final version of 89 lines.The revisions involved three ...

Open to work is really scary😭 I had a great night networking with all the career fields but still cant find any architects," ...

A realistic roadmap to learn JavaScript for web development, from your first console.log to your first real project, without ...

Craft Anything is an open-source Rust engine that studies any website, app or game and has a coding agent build your own ...

The Busy Bar can run JavaScript apps now, and an app catalog is just around the corner.

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.