Click any tag below to further narrow down your results
Links
Tomarigi is a macOS app that visualizes Claude and Codex coding agent sessions as animated birds in a floating window, letting you monitor multiple agents' status at a glance and jump between their terminal panes. It reads session transcripts directly without requiring hooks or config changes, and optionally uses API keys for speech summaries and question detection.
- Displays each AI coding session as a bird with status indicators (working, waiting, done) in an always-on-top floating window that's click-through to windows below
- Works passively by reading existing transcript files from ~/.claude/projects and ~/.codex/sessions with no agent-side modifications needed
- Integrates with Ghostty terminal to jump directly to the pane running a specific session with one click
Researchers at Tenet Security showed how anyone with a public Sentry DSN can inject a fake error report that coding agents like Claude Code, Cursor, and Codex will treat as a fix instruction. The agent fetches the malicious payload via the Model Context Protocol and runs arbitrary commands on the developer’s machine, exposing environment secrets and credentials. Sentry won’t close the write endpoint, leaving the fix to agent runtimes to filter untrusted data.
- A public write-only Sentry DSN lets attackers inject fake error reports that coding agents (Claude Code, Cursor, Codex) blindly treat as trusted fix instructions, leading to arbitrary code execution on developer machines.
- Tenet's tests across 2,388 organizations (including 71 Tranco top-1M sites) got an 85% success rate with 100+ confirmed code executions, hitting even a developer at a $250B Fortune 100 firm.
- The attack is invisible to traditional defenses (firewalls, EDR, WAFs, IAM) since it never touches victim infrastructure or needs passwords, and prompt-level "ignore untrusted data" instructions failed to stop it.
- Sentry isn't closing the vulnerable write endpoint, so the only real fix is runtime-level gating in the agent itself to sandbox or reject commands sourced from external/unauthenticated data.