Unlike many bulk-generated skill repositories, this collection focuses on real-world Agent Skills created and used by actual engineering teams, not mass AI‑generated stuff. Compatible with Claude Code ...

To get this out of the way, you should probably be more cautious than I’ve been about downloading and using a vibe coded piece of software today. Having said that, holy toledo, someone vibe coded ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.

Cursor has disclosed malicious versions of the Anthropic.claude-code extension in its VS Code Extension Marketplace that ...

A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specialized expert with personality, ...

OpenSourceMalware says a Claude Code extension artifact on Open VSX, version 2.1.313, added an attacker SSH key, opened a ...

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...

AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still ...