News
In September, booby-trapped repositories were enough to make several coding agents run attacker code.
Booby-trapped git settings ran code in Claude Code, Codex, Cursor and four other agents before any approval request.
Codex lost its sandbox twice, according to the resource selection published by Adversa.
More than 13,000 screenshots leaked to public GitHub repositories, with no attacker at all.
Booby-trapped updates compromised all seven harnesses tested, with up to 92.5% success.