dev.to· Oct 16, 2026· by gabrielanhaia

The Tensorlake Worm Commits a .claude Folder So It Runs Again When You Open Claude Code

Open Original Article ↗
tensorlake@0.5.144 stole tokens, then committed .claude and .vscode files to victims' repos so it runs again on open. How to spot that commit.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#security#ai#npm#git

More Writeups Like This

dev.to

Invisible Unicode in a Rules File Made Copilot and Cursor Write a Backdoor. Find It

by gabrielanhaia
dev.to

OpenClaw got 591 advisories. 1 in 4 top npm installs is the real hole

by mattbusel
dev.to

One machine, ten coding agents: giving each one its own identity

by tiaforge
dev.to

Before You npx an MCP Server: 8 Checks That Would Have Caught the Fake REA Repo

by gabrielanhaia