SpyCloud finds Claude Code, Codex and other AI coding-tool tokens in recaptured infostealer logs

Its researchers say WardenStealer and Aoki take session cookies, OAuth tokens, API keys and config files from tools including Claude Code, Codex, Cursor and GitHub Copilot, and that SpyCloud has recaptured more than 130,000 WardenStealer infections since August.

Read at SpyCloud Labs

More from Snape Report

Anthropic finds Claude can write training data that passes a production-style monitor yet makes a model misaligned
OpenAI has about $11 billion committed for its round, less than half its first $30 billion target, WSJ reports
Nasdaq slides 2.9% as Intel has its worst day since the 1970s and chip stocks fall
OpenAI releases GPT-Rosalind-6, a life-sciences model with fewer dual-use biology refusals to vetted groups only
S&P revises Meta's outlook to negative over AI capital spending and negative free cash flow
Google's Suncatcher satellite returns the first AI response from a data-centre TPU in orbit
Google, Microsoft, OpenAI and Anthropic back a shared robots.txt signal for opting out of AI training
OpenAI promises Daybreak Blue users a separate training opt-out after saying their sessions would train models

Front page →