Install Pi Coding Agent 1.4.0 the official way, tell the @earendil-works package from the oh-my-pi fork, connect one provider and prove the loop with a read-only smoke test before the first edit. Then go past the quickstart: project trust, a working project .pi/settings.json with a model allowlist and mounted prompts, packages with pi install, MCP servers with pi mcp, and the Docker, OpenShell and Gondolin boundaries for repositories you do not own. Tested on Pi 1.4.0 with Node 22.23 on macOS.
A maliciously modified version of Anthropic's Claude Code extension was available in Cursor's VS Code Extension Marketplace between about 2:27 a.m. and 1:35 p.m. Pacific on Thursday, Oct. 29. The extension ran code that attempted to install a persistent SSH backdoor. Cursor, the coding-tool company owned by SpaceX, said the incident affected up to 5,000 users.
Extensions auto-update in Cursor by default. The extension updated itself in Cursor to the malicious version.
"A malicious actor used access to Cursor's marketplace to publish a tampered extension targeting
We have dictated close to 100,000 words into a free app maintained almost single-handedly by a developer in Zeuthen. Here is what it does that paid rivals charge for, and where it still falls short.
Meta's 816-billion-parameter Muse Spark Open runs at home on two linked M5 Ultra Mac Studios that Apple has not yet priced. Hosted access costs $4.25 per million output tokens. Apple's own speed tests and today's cloud prices decide which workloads make the purchase pay.
· 16 min read
Implicator PRO
The analysis your competitors are reading.
Weekly deep dives into the deals, strategies, and power shifts reshaping the AI industry.
Weekly long-form analysisExclusive data briefingsEarly access to reports
IMPLICATOR
