[From the IT Frontline.] Mods have arrived in Claude Code—Extensions running inside, and what to read before installing

On October 1st, a mechanism called "Mods" was added to Claude Code. It allows you to change the behavior and appearance of ...
Security Boulevard

Hijacked TensorLake npm Turned Install Into Credential Risk

TL;DR A malicious release of TensorLake's TypeScript SDK, tensorlake@0.5.144, used an install hook to search for developer credentials and accept remote commands. Sonatype's code review found that its ...