Supply Chain Security
- Developer Tools
Auditing cursor/plugins: 96 Official Plugins, 9,320 Stars, 2.4% Config — and a CI Gate That Passed an Inline `curl | bash` Hook
Cursor's official plugin repository ships 96 plugins in 6.09 MiB. I measured all of it: 65.5% of the bytes are images and only 2.4% is machine-readable config, 80 of the …
- Security
Claude Code Source Leak: 512K Lines Exposed on npm
On March 31, 2026, a routine npm release turned into one of the most revealing accidental exposures in AI tooling history. Researchers discovered that version 2.1.88 of …