#Claude Code
All CosmicBytez Labs articles tagged #Claude Code, across news, security advisories, how-to guides, and projects.
- News
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
CyberXero combined Claude Code, PentAGI, and Cobalt Strike to steal 628,000+ Ukrainian records and probe national energy infrastructure.
- News
Anthropic Offers Up to $250 in Free Claude Code Credits — Cloud Sessions Only
Anthropic made Claude Code cloud sessions generally available and is giving Pro users $100 and Max users $250 in credits, claimable through Oct. 7.
- News
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Researchers from the ASSET Research Group disclosed GhostSplice — a novel cross-channel trust fragmentation attack that splits malicious instructions...
- News
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
A maximum-severity flaw (CVE-2026-59726, CVSS 10.0) in the Ruflo open-source agent harness for Claude Code and OpenAI Codex allows unauthenticated remote...
- News
AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
Researchers at the AI Now Institute have demonstrated a 'Friendly Fire' attack that tricks AI coding agents — including Claude Code, Gemini CLI, and...
- News
Claude Code Leak Used to Push Infostealer Malware on GitHub
Threat actors are capitalising on the Claude Code source code leak by creating fake GitHub repositories that impersonate the leaked source to deliver...
- News
Critical Vulnerability in Claude Code Emerges Days After
Adversa AI has discovered a critical vulnerability in Anthropic's Claude Code AI coding assistant, disclosed just days after Anthropic accidentally leaked...
- News
Claude Code Source Code Accidentally Leaked in NPM Package
Anthropic accidentally published the source code for Claude Code — its normally closed-source AI coding assistant — inside an npm package. The company...
- Newsletter
Mar 31 Digest: Axios npm RAT, Claude Code Source Leaked
The Axios npm library was weaponized to deliver a cross-platform RAT; Anthropic accidentally leaked Claude Code's CLI source in an npm package; Google...
- Project
Claude Code for IT Operations: Building a Multi-Project
Transform Claude Code from a chatbot into a DevOps co-pilot. Set up CLAUDE.md templates, custom hooks, reusable agents, deployment skills, and MCP server...
- Project
Securing AI-Assisted Development with Claude Code
Build guardrails around AI-generated code with Claude Code hooks, security-scanning agents, OWASP-aware prompting, and automated secret detection. A...