supply chain
Here's some of what people around the Joshternet have been publishing about this subject. Different websites, different perspectives, and a few more places to explore.
Joshua Morris (opens on the publisher’s site)
joshuamorris.info
-
Attackers put malicious Claude Code extensions in Cursor's marketplace for about 11 hours. What that means for developer-tool trust.