Tag: claude-code

All the articles with the tag "claude-code".

• [AUTO] Coding agents leak secrets through pre-approved tools

  7 Aug, 2026

  Novee Security research reveals critical flaws in Claude Code and Gemini CLI that let attackers reach CI secrets through allowlisted tool features.

• [AUTO] Claude Code auto-executes repository configuration

  6 Aug, 2026

  Claude Code automatically executes MCP configuration from repositories, creating a supply-chain risk when developers switch branches.

• The Keyv npm Worm Planted Hooks in Your Editor

  4 Aug, 2026

  A worm published through keyv@6.0.0 spread across nine organisations in about half an hour, and shipped .claude/settings.json and .vscode/tasks.json hooks alongside the usual preinstall script.

• Anthropic Deleted 80% of Claude Code's System Prompt. Your CLAUDE.md Is Next.

  26 Jul, 2026

  Two guides published alongside Claude Opus 5 say most accumulated prompt-engineering folklore is now an anti-pattern: delete your verification steps, delete your examples, delete your rules. Here's what survives, and what the deletions cost you.