Cybersecurity articles tagged #Developer Security on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/vs-code-marketplace-abuse-detecting-malicious-developer-extensionshttps://runtimerebel.com/blog/vs-code-marketplace-abuse-detecting-malicious-developer-extensionsResearchers identify malicious Visual Studio Code extensions exfiltrating source code and credentials. Learn how to secure your development environment.Mon, 27 Jul 2026 03:19:47 GMTVS CodeMarketplace SecurityDeveloper SecuritySupply Chain AttackCredential Thefthttps://runtimerebel.com/blog/ai-generated-code-vulnerabilities-framework-pairing-is-key-to-riskhttps://runtimerebel.com/blog/ai-generated-code-vulnerabilities-framework-pairing-is-key-to-riskAI-generated code introduces an average of 15 vulnerabilities per codebase. This analysis explores how framework choices significantly influence the actual security risk.Tue, 21 Jul 2026 13:56:54 GMTAI Generated CodeCode SecurityApplication SecurityVulnerabilitiesDeveloper SecuritySecure Developmenthttps://runtimerebel.com/blog/ai-generated-workflows-hidden-vulnerabilities-control-gapshttps://runtimerebel.com/blog/ai-generated-workflows-hidden-vulnerabilities-control-gapsExplore the silent security disaster of AI-generated workflows. Understand hidden vulnerabilities, control gaps, and the critical need for human oversight in AI-driven…Tue, 30 Jun 2026 16:49:06 GMTAI SecurityWorkflow AutomationShadow ITSupply Chain RiskDeveloper Securityhttps://runtimerebel.com/blog/claude-code-indirect-prompt-injection-hijacking-developer-machineshttps://runtimerebel.com/blog/claude-code-indirect-prompt-injection-hijacking-developer-machinesResearchers demonstrate a new attack method leveraging indirect prompt injection in Claude Code, enabling the hijack of developer machines via malicious code in…Mon, 29 Jun 2026 17:07:49 GMTClaude CodePrompt InjectionSupply Chain AttackDeveloper SecurityAI SecurityReverse ShellMachine Hijackhttps://runtimerebel.com/blog/ai-agent-malware-evasion-hidden-payloads-via-github-reposhttps://runtimerebel.com/blog/ai-agent-malware-evasion-hidden-payloads-via-github-reposNovel technique exploits AI coding agents to execute undetectable malware from clean GitHub repositories, bypassing security scanners and human review.Sat, 27 Jun 2026 16:29:10 GMTAI SecurityGitHub SecuritySupply Chain AttackAI Coding AgentsMalware EvasionDeveloper Securityhttps://runtimerebel.com/blog/agentjacking-tricking-ai-coding-agents-into-malicious-code-executionhttps://runtimerebel.com/blog/agentjacking-tricking-ai-coding-agents-into-malicious-code-executionAgentjacking is a new attack where crafted Sentry error reports trick AI coding agents into executing arbitrary code on developer systems, risking intellectual property…Fri, 12 Jun 2026 13:18:34 GMTAgentjackingAI Coding AgentsSentryMalicious Code ExecutionDeveloper SecuritySupply Chain Attackhttps://runtimerebel.com/blog/ironworm-rust-written-malware-hits-npm-supply-chain-developershttps://runtimerebel.com/blog/ironworm-rust-written-malware-hits-npm-supply-chain-developersAnalysis of the Rust-written IronWorm malware targeting npm supply chain developers.Fri, 05 Jun 2026 01:01:31 GMTIronWormRustNPMSupply Chain AttackCredential TheftDeveloper Securityhttps://runtimerebel.com/blog/github-repository-breach-3800-repos-accessed-via-vs-code-extensionhttps://runtimerebel.com/blog/github-repository-breach-3800-repos-accessed-via-vs-code-extensionGitHub confirms a security incident where a malicious VS Code extension compromised an employee account, leading to the unauthorized access of 3,800 repos.Wed, 20 May 2026 09:15:55 GMTGitHubVS CodeSupply Chain AttackCredential TheftDeveloper Securityhttps://runtimerebel.com/blog/shai-hulud-worm-code-leak-how-clones-threaten-developer-environmentshttps://runtimerebel.com/blog/shai-hulud-worm-code-leak-how-clones-threaten-developer-environmentsThe release of Shai-Hulud worm source code triggers a surge in self-replicating clones, targeting software developers and automated CI/CD pipelines.Mon, 18 May 2026 20:37:43 GMTShai HuludWormDeveloper SecuritySource Code LeakMalware Analysishttps://runtimerebel.com/blog/developer-workstations-the-new-front-in-software-supply-chain-attackshttps://runtimerebel.com/blog/developer-workstations-the-new-front-in-software-supply-chain-attacksA surge in attacks targeting npm, PyPI, and Docker Hub highlights a shift toward stealing developer credentials and API keys from workstations and CI/CD pipelines.Mon, 18 May 2026 13:23:15 GMTNPMPyPIDocker HubCI CD SecurityCredential TheftDeveloper Securityhttps://runtimerebel.com/blog/supply-chain-attack-bitwarden-cli-npm-package-compromisedhttps://runtimerebel.com/blog/supply-chain-attack-bitwarden-cli-npm-package-compromisedAnalysis of the Bitwarden CLI npm package compromise (version 2023.12.0) leading to developer credential theft and supply chain risk. Includes mitigation.Thu, 23 Apr 2026 20:25:37 GMTBitwardenNPMSupply Chain AttackCredential TheftDeveloper SecurityCLIhttps://runtimerebel.com/blog/cursor-ai-rce-via-indirect-prompt-injection-mitigation-guidehttps://runtimerebel.com/blog/cursor-ai-rce-via-indirect-prompt-injection-mitigation-guideSecurity researchers demonstrate how indirect prompt injection in Cursor AI could lead to full shell access on developer workstations. Patch immediately.Fri, 17 Apr 2026 08:43:51 GMTCursor AiRCEPrompt InjectionDeveloper SecurityJohann Rehbergerhttps://runtimerebel.com/blog/github-malware-campaign-fake-vs-code-alerts-target-developershttps://runtimerebel.com/blog/github-malware-campaign-fake-vs-code-alerts-target-developersAttackers exploit GitHub Discussions to push malware via fake VS Code security alerts. Learn the TTPs used to target developers and how to mitigate risk.Fri, 27 Mar 2026 20:15:23 GMTGitHubVisual Studio CodePhishingMalwareInfostealerDeveloper Securityhttps://runtimerebel.com/blog/anthropic-patches-claude-code-vulnerabilities-enabling-silent-hackinghttps://runtimerebel.com/blog/anthropic-patches-claude-code-vulnerabilities-enabling-silent-hackingAnthropic addressed flaws in Claude Code that allowed attackers to execute arbitrary commands on developer devices via malicious repository configurations.Thu, 26 Feb 2026 16:27:39 GMTAnthropicClaude CodeRCEPrompt InjectionDeveloper SecurityCheck Point Researchhttps://runtimerebel.com/blog/microsoft-warns-of-fake-next-js-repos-delivering-in-memory-malwarehttps://runtimerebel.com/blog/microsoft-warns-of-fake-next-js-repos-delivering-in-memory-malwareMicrosoft warns developers of a coordinated campaign using malicious Next.js repositories disguised as job assessments to deliver in-memory malware.Thu, 26 Feb 2026 12:20:28 GMTNext JsSocial EngineeringIn Memory MalwareDeveloper SecurityMicrosoft Threat IntelligenceGitHubhttps://runtimerebel.com/blog/ai-code-generation-poses-supply-chain-risk-to-developer-machineshttps://runtimerebel.com/blog/ai-code-generation-poses-supply-chain-risk-to-developer-machinesLearn how AI-generated code, like from Anthropic's Claude, can introduce vulnerabilities and malicious payloads, compromising developer machines and software supply…Thu, 26 Feb 2026 00:34:32 GMTAI SecuritySoftware Supply ChainDeveloper SecurityCode GenerationAnthropic ClaudeMalicious Code