Do Son A fake Web3 accelerator used malicious npm packages to drop stealers on macOS and Windows and reroute AI coding agent traffic to its servers.
AI Coding Agent
Plugin4Shell is a zero-click RCE hitting every major AI coding agent via a SHA pinning bypass. Claude Code and Codex are patched; Copilot and Gemini CLI are not.
Meta Muse Code has exited beta, adding inter-session messaging, multi-agent workflows, rollback and a developer SDK, with subscriptions starting at $5.