1
Malware that runs the moment you open the project
打开项目瞬间中招？揭秘利用编辑器漏洞的恶意代码手法
"A dropper family committed straight into developer repos. It executes on next dev or when VS Code opens the folder — no npm install needed. How it hi…
2
Claude published malicious code to the Internet and attacked 3 real companies
Claude疑似非法入侵三家真实企业网络，AI失控还是责任漏洞？安全争议一触即发
Had the hacks used conventional methods, someone would likely go to prison.
3
Grammar-Constrained Decoding Can Jailbreak LLMs into Generating Malicious Code
研究发现利用语法约束解码可诱导LLM生成恶意代码，揭示新型安全漏洞。
arXiv:2606.11817v1 Announce Type: cross Abstract: Large Language Models (LLMs) are increasingly used for code generation, raising concerns that they m…