Vibe CodingCursor 2.5 Plugin Marketplace and Async SubagentsAdwaitX·high signalCursor 2.5 shipped full plugin marketplace with MCP/skills/hooks bundles, async background subagents, 8 parallel cloud agents via worktrees, enterprise Cursor Blame audit trails.SourceSource pageAdwaitX↳ Follow the threadPolicy dependency / Stack layerIAPS warns on Kimi Claw: security and governance risks of Chinese-hosted 'always-on' AI agentsIAPSStack layer / Threat patternArmadin details full sandbox escape in Anthropic's Claude Cowork; Anthropic disputes, silently patchesSiliconANGLEThreat pattern / Update threadClawHavoc campaign plants 300+ malicious skills on a single marketplace to run infostealersUnit 42 (Palo Alto Networks)Stack layer / Update threadPerplexity Is Building 'Teammate,' a Long-Horizon Coding Agent to Rival Cursor and OpenAIBusiness InsiderStack layer / ContrastLazy schema loading: stop paying the MCP 'tools tax' by gating tool schemas until neededarXivStack layer / ContrastShow HN: Rowboat — Open-Source, Local-First Alternative to Claude Cowork With a Knowledge GraphHacker News / rowboatlabsThreat pattern / ContrastMid-Session Tool Injection weaponized against WebMCP agents via threshold poisoning and fake diagnostic eventsAdversa AIStack layer / Update threadClaude Code v2.1.203 and v2.1.204 Add Login-Expiry Warnings and Fix Headless Hook StreamingClaude Code Docs