🧰 Windsurf

The items that name it 30

• Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines
  writeupas affected products2026-10-30
• StepSecurity Now Inventories AI Agent Skills in Your GitHub Repositories and on Developer Machines
  articleas affected products2026-10-08

  AI coding agent covered by StepSecurity's agent skills inventory; uses .windsurf/skills folder.

• graygnatconsole/mcp-audit-tool
  repoas affected products2026-09-26
• Top 10 attacks on Claude Code and what each one actually broke
  writeupas affected products2026-09-23

  Part of Wiz's six-assistant GhostApproval study; placed in the tier that writes to disk before user approval.

• 30+ MCP CVEs in Two Months: What the Early-2026 Vulnerability Wave Means for Your MCP Supply Chain
  articleas affected products2026-09-23

  MCP client that used mcp-remote at the time of CVE-2025-6514

• ToolLeak: Tool-Invocation Attacks on Coding Agents
  paperas affected products2026-09-21

  tested for prompt leakage and tool-invocation hijacking

• AI Agent Hacking Writeups
  repoas affected products2026-09-17
• Remediation Agents, Demystified: Why Fixing Beats Finding
  articleas classification.technologies2026-08-19
• Security notice and deprecation: standalone circleci-mcp-server
  advisoryas tools2026-07-20

  AI tool that connects to the CircleCI MCP server via MCP config file

• AI Security Briefing
  writeupas affected products2026-07-18

  Closed-source agent, out of scope for direct testing

• The Cursor deeplink vulnerability that turns a “review this PR” click into remote code execution
  writeupas affected products2026-07-15
• JFrog: Managing AI Agent Primitives with APM
  articleas affected products2026-07-15

  AI coding tool supported as an APM target

• awesome-ai-security-tools
  repoas affected products2026-07-11

  AI coding agent covered by MCP Defender

• jscrambler npm Package Compromised in Supply Chain Attack
  writeupas affected products2026-07-11

  .codeium/windsurf/mcp_config.json targeted

• Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)
  articleas affected products2026-07-09

  AI coding assistant found vulnerable to the GhostApproval symlink attack; acknowledged the report without defending the behavior.

• GhostApproval: A Trust Boundary Gap in AI Coding Assistants
  writeupas affected products2026-07-08
• Advanced Prompt Injection Techniques 2026: 7 Attack Chains
  articleas affected products2026-07-04

  Target of 'SpAIware' memory-persistent exfiltration exploit demonstrated by Johann Rehberger; long-term memory feature abused for persistent multi-turn injection

• FOSSA: Underappreciated OSS License Compliance Risk from AI Coding Tools
  articleas affected products2026-07-03

  AI coding assistant discussed as part of the category introducing OSS license compliance risk

• What nearly 10,000 developer environments reveal about agentic development risk
  articleas affected products2026-06-23

  AI coding environment; developers found running multiple such environments simultaneously

• Socket: Firewall Now Blocks Malicious VS Code and Open VSX Extensions
  articleas affected products2026-06-18

  VS Code-based editor relying on Open VSX.

• Dev Machine Guard Now Scans Extensions Across Every Modern IDE
  articleas affected products2026-06-02

  VS Code fork, IDE extension ecosystem covered by Dev Machine Guard

• H-mmer/pentest-agents
  repoas tools2026-05-18

  Supported AI coding tool target; framework emits AGENTS.md + .windsurf/{rules,workflows,skills} + mcp_config.json

• Pantheon-Security/medusa
  repoas affected products2026-05-10It is written here as Windsurf (.windsurfrules, .windsurf/rules/*).

  .windsurfrules, .windsurf/rules/*

• AI Repository Security Baseline
  repoas affected products2026-05-08

  AI coding agent covered by the baseline (.windsurfrules)

• Socket: 73 Open VSX Sleeper Extensions Linked to GlassWorm
  writeupas affected products2026-05-06

  Target IDE for malicious --install-extension commands

• MCP Audit Extension
  repoas affected products2026-05-06

  Forked IDE from VS Code; compatibility depends on adoption of VS Code base version 1.101+, support planned for future releases

• 973 MCP Packages, 71% Single-Maintainer: A Practitioner
  articleas affected products
• SANDWORM_MODE: Dissecting a Multi-Stage npm Supply Chain Attack | Blog | Endor Labs
  writeupas classification.technologies
• Dev Machine Guard Now Supports Windows - StepSecurity
  articleas affected products

  IDE covered by extension scanning

• Dev Machine Guard Now Supports Linux - StepSecurity
  articleas classification.technologies

In every workspace you can read 40