DevDefender

devdefender.netHow binding.gyp can be exploited

2 July

devdefender.netReleased: Security Digest v0.1.2

2 July

DevDefender reposted

Liran Tal

@lirantal.com

6 Mar

look at the last column and your favorite LLM for how likely they are to produce correct code (which for you seems fine), yet insecure code (which is great for attackers), that's from #baxbench project

devdefender.netDevDefender Security Digest — 2026-03-03Relevant news, security threats, and vulnerability reports that affect developers, software pipelines, IDEs, and dev environments.

4 Mar

Introducing the DevDefender Security Digest: a collection of relevant news, security threats, and vulnerability reports that affect developers, software pipelines, IDEs, and dev environments.

devdefender.netRelative path traversal in git MCP Server: data exfiltration using 'git_add'Versions prior to 2026.1.14 of mcp-server-git are vulnerable to data exfiltration through relative path traversal, allowing paths outside the repository to be added to the repo and exfiltrated by committing and pushing the repository.

26 Feb

Versions prior to 2026.1.14 of mcp-server-git are vulnerable to data exfiltration through relative path traversal, allowing paths outside the repository to be added to the repo and exfiltrated by committing and pushing the repository.

devdefender.net'Clinejection': spread a payload by opening an issueThere is no foolproof method of preventing all prompt injection attacks, but there are some ways to limit the scope of such an attack. This is not one of those ways.

26 Feb

There is no foolproof method of preventing all prompt injection attacks, but there are some ways to limit the scope of such an attack. This is not one of those ways.

devdefender.netSANDWORM_MODE: npm Worm Poisoning AI ToolchainsSocket’s Threat Research Team dropped an incredibly detailed report on a Shai-Hulud-like supply chain worm that affects 19+ malicious npm packages. NPM Worm Credential Harvesting From their announc...

SANDWORM_MODE is a supply chain worm that has similarities to Shai-Hulud and poisons AI Agents using an innocuous-looking MCP server installed on the developer machine.

25 Feb

shoutout to the @socket.dev team for the incredible report.

devdefender.net128M Downloads: Four New VSCode Extension VulnerabilitiesOX Security announced four new CVEs on VSCode extensions February 17, 2026. These four extensions had been downloaded 128M times.

OX Security has found four new vulnerable extensions in VSCode with 128M collective downloads: RCE and remote & local exfil.

devdefender.netZed LSP Arbitrary Code ExecutionA vulnerability in the AI editor Zed allows for an attacker to modify the zed settings.json file to add an arbitrary script as an Language Server Protocol. When the malicious LSP is triggered, the cod...

Zed LSP without Restricted Mode enabled allows a project's settings configuration to load arbitrary code when a repository is opened.

devdefender.netExploit Cursor Agents to create persistent, distributed threatsSimply opening a folder can give an attacker a foothold into all the code bases a developer maintains.

VSCode, Cursor, and any other editor based on Visual Studio Code are vulnerable to an auto-exec vulnerability that is triggered by a simple, everyday task: opening a folder.