Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-21 · source-backed
The take-home, hosted on Bitbucket, fetched a payload from api.jsonbin.io on npm run dev, unwrapped 24,686 characters of obfuscator.io JavaScript around a webpack bundle, and phoned home. Four modules: interactive RAT with screen capture, stealer targeting 28 crypto wallet extensions, SSH-key and dotenv grabber, clipboard monitor. codedge.de The detail worth keeping is the author asking Claude Code to scan the repo for anything unusual and getting nothing back. An agent read is not a security review, and the failure is silent.
Each link below shares sources, entities, or timing with this story.
Claude Code uses VS Code / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses VS Code); both cover Claude Code, SSH; overlapping topics (agent, claude, code).
OpenCode competes with Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (OpenCode competes with Claude Code); both cover Claude Code, JavaScript; overlapping topics (agent, bundle, claude, code).
Simon Willison uses Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Simon Willison uses Claude Code); both cover Claude Code, JavaScript; overlapping topics (agent, around, claude, code).
Claude Code uses Claude Desktop / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses Claude Desktop); both cover Claude Code, SSH; overlapping topics (claude, code).
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Claude Code, SSH; overlapping topics (agent, claude, code).
Anthropic released Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude Code); both cover Claude Code, JavaScript; overlapping topics (agent, claude, code).
Adversa AI criticizes Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes Claude Code); both cover Claude Code, SSH; overlapping topics (agent, claude, code).
Codex competes with Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Codex competes with Claude Code); both cover Claude Code, JavaScript; overlapping topics (agent, claude, code).