socket.dev

AIAI-generated summary According to the report, a malicious Claude Code 2.1.313 extension is rumored to have been distributed through the marketplace before its removal. Cursor says it removed the extension, rebuilt its marketplace after rotating keys, and worked with the hosting provider to take the attacker’s server offline.

AIAI-generated summary OpenCode has a release available following reports of disrupted access and discussions regarding free model usage limits. OpenCode collaborator rekram1-node says that enforcing limits without authentication is difficult and that abuse undermines the effort to let anyone try a coding agent at no cost.