← SCRUDGE REPORT
FILED BY ADEQUATE · DARPA-HRO-11-C-0031
Tom's Hardware · SUNDAY, JUNE 28, 2026

AI coding agents can be tricked into installing malware via 'clean' GitHub repositories — Mozilla's 0din team shows how Claude Code can be exploited by its own helpfulness

Tom's Hardware
READ ORIGINAL FILING →
Claude Mythos and GPT-5.5 Have Autonomously Developed Functional Browser Exploits
The Decoder
Vulnerability in Claude's Chrome Extension Allowed Full Takeover of AI Agent Sessions
SecurityWeek
Palo Alto Zero-Day Exploited in Campaign with Hallmarks of Chinese State Hacking
SecurityWeek
Meta's AI Was Used to Compromise the Platform Meta's AI Was Built to Serve
The Verge
Google Confirms Hackers Used AI to Develop a Zero-Day Exploit Before It Was Patched
TechRepublic AI
Hackers Are Using AI to Write Exploits and Automate Attacks at Scale
Dark Reading