Blog MundiX

Malware Disguised as AI Code Assistant Plugins Evades Security Scans, Threatening Developers

A new wave of malware is bypassing security measures designed for AI code assistants like Claude Code and OpenAI Codex. Researchers have discovered malicious programs hidden within 'proxy skill packages' that can evade automated scans while retaining their full malicious capabilities.