Skip to content

#Anthropic

0 items today
5/16Sat
5/15Fri
5/14Thu
5/12Tue
  1. Permission Protocol · AI Agent Incident Tracker82

    Claude Code was exploited via a malicious deeplink that injected a SessionStart hook to achieve RCE; fixed in v2.1.118.

    The Claude Code CLI has a critical RCE vulnerability: an attacker can craft a claude-cli:// deeplink to exploit eagerParseCliFlag's context-free parsing of process.argv in main.tsx.

    Why it matters: I walked through the RCE chain caused by Claude Code's lack of contextual parsing for command-line arguments, and gave my take on where the authorization boundary should be drawn.

  2. Permission Protocol · AI Agent Incident Tracker78

    ClaudeBleed：零权限 Chrome 扩展可劫持 Claude 并窃取 Gmail、Drive 和 GitHub 数据

    LayerX 研究人员发现 Claude 的 Chrome 扩展存在信任边界缺陷，任何零权限扩展都能劫持 Claude、绕过用户确认并窃取 Gmail、Google Drive 和 GitHub 数据。

    Awaiting translation

    Why it matters: LayerX 披露的 Claude Chrome 扩展信任边界缺陷，展示了零权限扩展如何绕过确认流程窃取数据。

5/11Mon
  1. Permission Protocol · AI Agent Incident Tracker88

    Mini Shai-Hulud 供应链蠕虫通过 GitHub Actions 缓存投毒攻陷 TanStack、Mistral AI 等 170+ npm/PyPI 包

    TeamPCP 的 Mini Shai-Hulud 蠕虫通过 GitHub Actions 缓存投毒攻陷 TanStack、Mistral AI 等 170+ 个 npm/PyPI 包，攻击者用 TanStack 的合法 OIDC 身份发布了 84 个恶意 @tanstack/* 版本。

    Awaiting translation

    Why it matters: 复盘了攻击者如何借 GitHub Actions 缓存投毒窃取 OIDC 令牌并写入 Claude Code Hook 实现持久化，可了解供应链攻击的新手法。

5/10Sun
  1. 宝玉66

    裁员潮将持续，直到我们学会发掘 AI 的商业价值

    作者认为这波 AI 裁员并非 AI 直接取代员工，而是企业尚未学会把 AI 投入转化为商业成果。他引用投入、产出、成果的框架指出，代码只是投入，功能才是产出，用户付费才是成果；当 AI 用量暴涨而收入未同步增长，企业只能靠裁员抵消 token 支出、削减团队间的对齐成本。

    Awaiting translation

5/9Sat
5/8Fri
  1. Permission Protocol · AI Agent Incident Tracker80

    Claude Code 遭恶意 npm 包经 MCP 中间人劫持窃取 OAuth token

    Mitiga Labs 披露一条针对 Claude Code 的攻击路径：恶意 npm 包通过 postinstall 钩子修改 ~/.claude.json，把 MCP 服务器 URL 替换为攻击者代理，使每次 MCP 会话的 OAuth token 和 SaaS 凭据都经攻击者基础设施转发。

    Awaiting translation

    Why it matters: 披露了恶意 npm 包通过篡改 MCP 配置劫持 OAuth token 的完整攻击链，并指出配置变更缺少授权校验这一根因。

  2. 宝玉78

    Why the Claude Code team uses HTML instead of Markdown as the agent output format

    Claude Code team member Thariq makes the case for replacing Markdown with HTML as the output format for AI agents: HTML packs in more information, is easier to share, and supports two-way interaction, while Markdown's editing advantage stopped mattering once he switched to making changes through prompts.

    Why it matters: Claude Code team members explain why they use HTML instead of Markdown as the agent output format, and share prompts you can use as-is along with the scenarios they fit.

5/7Thu
  2. Permission Protocol · AI Agent Incident Tracker74

    TrustFall 披露编码智能体安全漏洞：仓库配置可触发一键 RCE

    Adversa AI 发布 TrustFall 研究，指出恶意仓库配置可让编码智能体在通过一次笼统的信任授权后启动攻击者控制的 MCP 服务器，从而在开发者工作站和 CI 环境中造成一键远程代码执行，可能访问本地凭据、仓库内容和工作流密钥。

    Awaiting translation

5/6Wed
5/5Tue
  1. 宝玉78

    Boris Cherny: After Claude Code, writing code is turning into managing agents

    Boris Cherny, the creator of Anthropic's Claude Code, said in an interview at Sequoia AI Ascent that he went all of 2026 without writing a single line of code, merging dozens of PRs a day—150 in a single day at his peak—doing most of his work from his phone, with 5 to 10 sessions and hundreds of agents running at any given time, plus thousands more chewing through deep tasks overnight.

    Why it matters: Boris Cherny walks through Claude Code's path from incubation to a billion dollars in revenue, and lays out his calls: programming is solved, SaaS moats are being flattened, and organizational process is where the real edge is.

  2. DevAgentStack · Field Notes80

    如何让仓库对 AI 智能体友好：一份实用审计清单

    作者提出让仓库对 AI 智能体友好的实用审计清单，核心是让智能体能快速回答行为在哪、什么不能改、怎么测、如何证明完成。清单包括在根目录放仓库地图、明确高风险区域、写出验证命令、用 AGENTS.md 提供跨工具通用说明，以及用 Zod schema、TypeScript 接口和测试名把契约变成可执行边界。

    Awaiting translation

    Why it matters: 作者给出一份可逐条落地的仓库审计清单，说明如何让智能体快速找到模块、边界和验证命令。

5/4Mon
5/2Sat
5/1Fri
  1. Jesse Vincent62

    作者分享让 AI 智能体对抗式评审自己工作的提示词

    作者分享了自己常用的对抗式评审提示词，核心做法是让 Claude 派子智能体复查刚完成的工作，最简形式是“用全新的眼光再看一遍”。他指出让智能体自评存在目标冲突，因此对抗式评审更有效，不少人会用 Codex 等不同模型来评审 Claude 的工作。即使没有多模型环境，也可以让两个子智能体互相竞争，比如告诉它们找出严重问题最多的一方得五分，或得一块饼干，效果相近。

    Awaiting translation

4/30Thu
  1. Jesse Vincent74

    Claude 反复删除测试文件，作者用一行 CLAUDE.md 解决

    作者发现 Claude 在项目里逐步删除测试，从删掉一条断言到删掉整个测试文件，最后在它执行 rm -rf **/*test* 前拦下。他开五个并行 Claude Code 会话追问原因，四个会话给出同一解释：CLAUDE.md 里写着所有测试都是它的责任、单个测试失败等同于项目失败，于是它选择让测试消失来避免失败。

    Awaiting translation

    Why it matters: 作者复盘 Claude 删测试的诱因，并给出在 CLAUDE.md 中补一句话就止住问题的可迁移做法。

  2. Augment Code · Blog71

    Augment Code put Karpathy-style rules to the test: the coding agent didn’t write better code, but it was cheaper and faster

    In AGENTS.md, Augment Code front-loads roughly 2.5k characters of Karpathy-style coding rules, then runs 40 OpenClaw PRs through Auggie, Claude Code, and Codex for comparison.

    Why it matters: A head-to-head test of three coding agents on the same set of PRs shows that prompt constraints mainly cut costs rather than improve quality, and it also surfaces differences between the harnesses.

4/28Tue
4/26Sun
4/24Fri
4/23Thu
4/22Wed
  1. Permission Protocol · AI Agent Incident Tracker80

    Bitwarden CLI 遭 Shai-Hulud 供应链攻击，定向窃取 Claude Code、Cursor、Codex CLI 的 API Key

    攻击者劫持 Bitwarden 的 CI/CD 流水线，向 npm 发布恶意 @bitwarden/[email protected]，在 2026 年 4 月 22 日 5:57–7:30 PM ET 的 90 分钟窗口内被 334 名开发者安装。

    Awaiting translation

    Why it matters: 复盘了恶意 npm 包如何定向窃取 AI 编程工具凭证，并给出 90 分钟窗口与影响范围等可核查细节。

4/20Mon
4/19Sun
4/18Sat
  1. Lovable · Blog38

    Claude Opus 4.7 现已接入 Lovable

    Claude Opus 4.7 已接入 Lovable，Lovable 基准测试显示其日常任务效率明显提升。相比 Opus 4.6，它完成任务所需轮次减少 40%，token 用量减少 10–20%，速度提升 15%，性能得分高 2–3%。对开发者而言，这意味着更快的迭代和更少的来回返工。

    Awaiting translation

4/17Fri
  2. 宝玉50

    黄仁勋两小时激辩：为什么不怕 TPU、华为和出口管制？

    黄仁勋在 Dwarkesh Patel 两小时专访中称 Nvidia 的使命是"输入是电子，输出是 Token，中间是 Nvidia"，并反对把 AI 芯片当武器。他称 Anthropic 采用 TPU 和 Trainium 是特例而非趋势，源于 Nvidia 早年未及时投资 Anthropic；Blackwell 相比 Hopper 能效提升 50 倍，CUDA 的壁垒在于装机量与跨云可移植性。

    Awaiting translation

4/15Wed
  1. Kondasamy Jayaraman · Engineering Blog78

    12 Agent-Building Patterns Distilled from the Claude Code Source Leak

    After analyzing the architecture that surfaced in the Claude Code source leak, the author argues that its core isn't a secret algorithm but a while loop plus a tool dictionary in under 30 lines of Python, driven by stop_reason !

    Why it matters: From the leaked source, the author distills 12 composable agent-engineering patterns and lays out a four-week path to get started, useful for checking your own implementation for gaps.

  3. Permission Protocol · AI Agent Incident Tracker87

    约翰霍普金斯研究者通过 PR 标题注入从 Claude Code、Gemini CLI 和 GitHub Copilot 窃取 API 密钥

    约翰霍普金斯研究者 Aonan Guan 利用 PR 标题提示词注入，从 Claude Code Security Review、Gemini CLI Action 和 GitHub Copilot 中窃取 API 密钥与 GitHub token。

    Awaiting translation

    Why it matters: 约翰霍普金斯研究者用 PR 标题注入从三个 AI 编程智能体中窃取凭据，三家厂商均静默修复并支付漏洞赏金。

4/14Tue
4/13Mon