1
I Built the Thing My Last Article Said Didn't Exist Yet
作者亲自下场，把上篇断言尚未存在的工具实作出来，借 Claude Code 与 VS Code 钩子演示供应链攻击如何滥用编辑器信任。
The other day I wrote about the npm worm that learned to trust your AI agent — a keyv -adjacent supply-chain attack that didn't bother with credential…