🧰 Anthropic Claude Code

The items that name it 5

• Socket: Open VSX Unblocks Extension IDs Used in Malware Campaign
  article2026-08-24It is written here as Anthropic.claude-code.

  Removal from malicious list explicitly described as a false positive or correction.

• 0DIN Expands: From Inference to Agency
  article2026-08-15

  in-scope agentic product

• GhostApproval: A Trust Boundary Gap in AI Coding Assistants
  writeup2026-07-08
• Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
  article

  CVE-2026-35603 via C:\ProgramData\<application> trusted folder config drop (managed-settings.json); also CVE-2026-25725 sandbox escape via .claude/settings.json hook

• FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
  article

  Found susceptible to AgentBaiting trickery, surfacing malicious campaign repositories without being shown a link.