Unlike many bulk-generated skill repositories, this collection focuses on real-world Agent Skills created and used by actual engineering teams, not mass AI‑generated stuff. Compatible with Claude Code ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.

Cursor has disclosed malicious versions of the Anthropic.claude-code extension in its VS Code Extension Marketplace that ...

A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specialized expert with personality, ...

OpenSourceMalware says a Claude Code extension artifact on Open VSX, version 2.1.313, added an attacker SSH key, opened a ...

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...

AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still ...

Anurag is an experienced journalist and author who’s been covering tech for the past 5 years, with a focus on Windows, Android, and Apple. He’s written for sites like Android Police, Neowin, Dexerto, ...