🧰 Qwen Code

The items that name it 4

• Top AI Coding Agent Security Resources — October 2026
  articleas affected products2026-10-02
• Top AI coding agent security resources — September 2026
  articleas affected products2026-09-03

  Exploitable in 71.6% of runs in the 2,826-file malicious skill file benchmark

• GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok - Manifold Security
  writeupas affected products2026-09-01

  core.fsmonitor sink via git status at startup, before user authentication; confirmed on 0.19.6, reported 7 July 2026 to Alibaba's security response centre and accepted; confirmed again on 0.22.3 on 1 September 2026; over 27,000 GitHub stars; remains unpatched

• Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
  articleas tools

  Alibaba AI coding agent affected by the flaw, fix pending

In every workspace you can read 7