Unverified50% confidenceFactExact time
The malicious code executes immediately when the extension loads, without requiring the user to actively trigger any feature.
1
Sources
50%
Confidence
Long-term
Relevance
11/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedNo-code platforms build applications entirely through drag-and-drop and configuration, with users not needing to write any code.63% similarUnverifiedSecurity firm Foreign found that as soon as the editor loads the malicious file, the code executes automatically, with no interaction with Claude required from the user.61% similarUnverifiedThe plugin is zero-dependency and can be initialized with a single command after cloning.60% similarUnverifiedCustom instructions are persistent and do not expire when a new conversation is started, unless the account holder actively deletes or modifies them.59% similarUnverifiedAdding a new operation requires only a new visitor class without modifying the node classes, in accordance with the open-closed principle.58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1123387API
curl https://kongchang.com/api/v1/knowledge/claims/1123387MCP
get_claim(id=1123387)