Last week in Agent Security Update 5: The Pentagon Prompts

Automated excerpt

On October 29th, versions 2.1.312 and 2.1.313 of the Clade Code VS Code extension were published to Cursor's VS Code extension marketplace for macOS and Windows that carried a malicious loader embedded in its extension.js bundle. Agent configuration files are acting as executable code inside coding assistants that most tools trust by default. Treat agent configuration like any other code and review it like any other executable.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.