AINewsnow

Claude Code ecosystem expands as multi-agent workflows and security concerns grow

This story is from 2026-10-30. It is preserved in the archive; the latest stories are on the live feed.

A wave of community tools lets Claude Code run alongside Codex and Gemini on shared repositories, while researchers report a backdoored Claude Code extension distributed via a marketplace, prompting calls for deterministic outbound security gates.

Read the full story at Microsoft Research Blog ↗

Timeline · 37 reports

  1. 2026-11-01 20:01 · DEV Community — AI
    Let Claude Code or Cursor debug your page in a real Chrome browser
  2. 2026-11-01 19:47 · DEV Community — AI
    Make Claude Code design, plan and test before it writes code
  3. 2026-11-01 16:01 · DEV Community — AI
    Cloned a Stranger's Repo? Check 6 Agent Config Files Before Claude Code or Codex Opens It
  4. 2026-11-01 15:52 · DEV Community — AI
    Coincide: Claude Code, Codex, Cursor and more, side by side on your Mac
  5. 2026-11-01 14:22 · DEV Community — AI
    Using Claude Code, Codex and Gemini CLI on the same repository
  6. 2026-11-01 13:48 · DEV Community — AI
    Malicious Claude Code Extensions in the Wild: Why AI Agents Need Deterministic Outbound Gates
  7. 2026-11-01 12:10 · DEV Community — AI
    Claude Code vs Codex: How I Use Both on One Repo
  8. 2026-11-01 10:54 · DEV Community — AI
    I gave Claude Code a crew. Codex and Gemini found a race in the plugin that runs them.
  9. 2026-11-01 07:05 · DEV Community — AI
    How to stop Claude Code, Cursor and Codex reading your .env file
  10. 2026-10-31 23:43 · DEV Community — AI
    "Buddy: let Claude Code, Codex and other AI agents use your Android phone
  11. 2026-10-31 23:27 · DEV Community — AI
    How to install and use agent skills in Claude Code, Cursor and Codex (with a free plugin marketplace)
  12. 2026-10-31 21:00 · DEV Community — AI
    I Let Claude Code Write a 20-Lesson Tutorial Course for My App From Its Codebase
  13. 2026-10-31 19:02 · DEV Community — AI
    Stop Claude Code from building the same generic landing page
  14. 2026-10-31 18:30 · DEV Community — AI
    A fake "official" Claude Code update planted SSH backdoors through Cursor's marketplace
  15. 2026-10-31 15:10 · DEV Community — AI
    How to Stop Claude Code From Reading Your .env File (Deny Rules Aren't Enough)
  16. 2026-10-31 14:01 · DEV Community — AI
    Your AI coding transcripts are a secret store: where Claude Code, Codex, Cursor, Copilot and Antigravity keep them
  17. 2026-10-31 13:20 · DEV Community — AI
    Claude Code Extension Backdoor in Cursor: Uninstalling Won't Remove the SSH Key
  18. 2026-10-31 11:30 · DEV Community — AI
    How to Tell What Claude Code and Codex Forget When They Compact a Session
  19. 2026-10-31 11:27 · The Next Web
    Anthropic denies breach as tampered Claude Code extension hits Cursor users
  20. 2026-10-31 09:38 · DEV Community — AI
    A trojanized Claude Code extension reached the Cursor Marketplace too — here's a 7-point audit for your machine
  21. 2026-10-31 08:15 · DEV Community — AI
    Claude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up
  22. 2026-10-31 08:02 · DEV Community — AI
    Two Claude Code sessions, one folder, no merge conflicts: how I split a hackathon build between AI agents
  23. 2026-10-31 07:49 · DEV Community — AI
    I'm 15, and I built an interactive vision simulator using Claude code, vanilla JS and CSS filters
  24. 2026-10-31 05:00 · Techmeme
    Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish
  25. 2026-10-31 01:02 · Microsoft Research Blog
    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
  26. 2026-10-31 01:01 · DEV Community — AI
    Make Claude Code build a landing page with real art direction
  27. 2026-10-30 21:09 · Ars Technica AI
    Anthropic VS code extension on Cursor backdoored for nearly 12 hours
  28. 2026-10-30 18:16 · The Decoder
    Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
  29. 2026-10-30 17:29 · Fast Company AI
    Hackers hijacked a Claude Code extension, exposing yet another new AI security risk
  30. 2026-10-30 16:27 · The Register AI/ML
    Anthropic: That Claude Code extension compromise… couldn't be us
  31. 2026-10-30 14:36 · BleepingComputer
    Malicious Claude Code extension on Cursor planted SSH backdoors
  32. 2026-10-30 12:59 · r/ClaudeAI
    A backdoored Claude Code extension hit up to 5,000 Cursor users
  33. 2026-10-30 11:18 · r/LocalLLaMA
    Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
  34. 2026-10-30 11:00 · Towards Data Science
    Claude Code Mods: Custom Hooks to Fix My Biggest AI Coding Frustrations
  35. 2026-10-30 08:55 · The Hacker News (security)
    Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
  36. 2026-10-30 08:33 · Reuters AI
    Cursor says up to 5,000 users affected by tampered Claude Code extension
  37. 2026-10-30 08:05 · Unite.AI
    Cursor Discloses SSH Backdoor Attempt in Malicious Claude Code Extension

More stories

  1. Claude Code ecosystem grows as security flaw found in malicious extension — Microsoft Research Blog
  2. How do you sandbox your AI coding agent? Looking to compare setups — r/AI_Agents
  3. API-Schlüssel im Browser offengelegt? Prüfen Sie Ihren OpenAI-, Claude- oder Gemini-Schlüssel in 2 Minuten — DEV Community — AI
  4. Use your Claude, ChatGPT or Gemini subscription in goose, no API key — DEV Community — AI
  5. Super easy onboarding for 12 coding agent CLIs, with your past chats imported — DEV Community — AI
  6. Major AI chatbots ChatGPT, Claude, and Gemini hit by simultaneous outages — Mashable AI
  7. I like Gemini's stupidity. — r/GeminiAI
  8. What we got wrong building an MCP server for AI visibility data — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →