Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, creating a new software supply ...
Adversaries could plant a malicious repository that executes arbitrary code and steals cloud credentials, showcasing MCP risk ...
An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure.
Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results