安全研究人员发现，Anthropic 的 Claude Code VS Code 扩展被恶意篡改，版本 2.1.313 被发布到 Open VSX 注册表。这个恶意版本在正常代码前插入了一个加载器，能够在用户无需启动对话的情况下，自动向用户的 SSH ...

10 月 29 日，Cursor 从其应用市场中移除了一个被入侵的 Claude Code 扩展。此前研究人员发现，这些恶意扩展安装了 SSH 后门。估计有 5,000 名用户可能受到影响。该问题不涉及 Anthropic 的 AI 模型 ...

Cursor 下架了该扩展，并暂时关闭扩展市场，以审查其他扩展并轮换访问密钥。它还与托管服务提供商合作，使攻击者的服务器下线，从而中断反向 SSH 连接和数据传输。Cursor 表示，内部调查未发现其他版本的扩展或官方分发渠道受到影响的证据。

Dify is a tool that allows you to build generative AI applications on a screen while minimizing the amount of code you need ...

But there may be cases where you will want to start using htmx without annotating objects, at least at first (for instance, ...

The fact that Claude, which does not have a video generation model, can create videos of map routes or ink wash painting animations is becoming a hot topic overseas.Hello, this is Sakashi.If you can ...

A realistic roadmap to learn JavaScript for web development, from your first console.log to your first real project, without ...

Cloudflare is tackling corporate security risks from AI-generated code with Void, a new open-source self-hosted platform ...

Craft Anything is an open-source Rust engine that studies any website, app or game and has a coding agent build your own ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

More model choice, greater coding freedom.

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...