Skip to content

Twitter AI Coding - 2026-04-26

1. What People Are Talking About

1.1 HERMES.md Billing Bug Ignites Open-Source Harness Advocacy πŸ‘•

@GergelyOrosz (Pragmatic Engineer) posted (256 likes, 16,572 views) quoting a viral thread from @om_patel5 about a Claude Code user who lost $200 in a single day because the string "HERMES.md" in his git commit history triggered an "authentication routing issue" that quietly billed API rates instead of his Max 20x subscription. The user's dashboard showed 13% weekly usage and 0% session usage, yet $200.98 in extra charges accumulated. Anthropic support acknowledged the bug three times but refused to refund.

Gergely followed up: "No one knows (save for the CC team) what weird rules Claude Code puts in place that is disadvantageous to its users. Only way to hold them accountable is for a tweet to go viral." He argued for open-source harnesses like OpenCode: "I am increasingly bullish on open source harnesses not because they will be better than SOTA closed harnesses, but because they will never pull shady stuff like what Claude Code and other closed harnesses can and do."

In a separate reply (4 likes, 342 views), he ranked harness openness: "It's a lot more open than Claude Code, so a step in the right direction. Not as open as OpenCode tho. Levels of how open and auditable a harness is."

Discussion insight: The HERMES.md incident crystallizes the core argument for open-source harnesses: closed tools can contain opaque server-side rules that silently alter billing behavior. The fact that only the specific string "HERMES.md" (uppercase, with .md extension) triggers the routing bug -- while AGENTS.md, README.md, and lowercase hermes.md do not -- suggests an accidental interaction between content filtering and billing routing, not a deliberate trap, but the opacity makes it indistinguishable from one.

Comparison to prior day: On April 25, the open-source harness narrative was driven by DeepSeek's climb in OpenCode Go usage. Today the driver shifts from performance to trust: a concrete billing failure in a closed harness is the catalyst for open-source advocacy.


1.2 GPT-5.5 Enterprise Rollout and Codex Momentum Continue πŸ‘•

@WesRoth reported (113 likes, 10,756 views) on Microsoft deploying GPT-5.5 across its enterprise ecosystem, quoting @satyanadella: "Super excited GPT-5.5 is rolling out to GitHub Copilot, M365 Copilot, Copilot Studio, and Foundry today." The deployment spans reasoning, multi-step execution, and long complex tasks.

@btibor91 compiled (22 likes, 3,503 views) the Week 17 recap noting Codex has scaled to over 4 million weekly users, with Codex Labs and GSI partners. OpenAI also shipped Codex Chronicle screen-context memory preview, workspace agents in research preview, and NVIDIA company-wide rollout.

@brunovolpato assessed (4 likes, 175 views): "For coding, OpenAI is clearly winning now with gpt-5.5 -- with xhigh I don't see any reason to go back and forth with models such as gpt-5.3-codex or opus-4.7 anymore." He praised Codex's enqueue prompt feature as "a game changer."

@RijnHartman demonstrated (10 likes, 256 views) GPT-5.5 xhigh in Codex converting a GPT Image v2 reference into a fully functional page with a live Convex backend in one shot: "This is the first time I've felt like openai is ahead of gemini for image to frontend work."

Dashboard UI built from GPT Image v2 reference via Codex one-shot generation

Discussion insight: The 4 million weekly Codex users figure and NVIDIA company-wide deployment mark a shift from early adoption to institutional scale. The enqueue prompt feature and image-to-frontend workflow represent the kind of workflow innovations that create switching costs.

Comparison to prior day: On April 25, GPT-5.5 was the dominant story through model unification confirmation and Databricks deployment. Today the narrative advances to scale metrics (4M users) and new capabilities (image-to-code, enqueue prompts). The qualitative user assessments are shifting from "it's good" to "it eliminates the need for alternatives."


1.3 Coding Agent Benchmarks: OpenCode Leads in Reproducibility and Local Models Excel πŸ‘•

@thdxr shared (135 likes, 8,472 views) a paper that tested coding agents on social science experiment reproducibility. OpenCode GPT-5.4 scored highest at 91.2% coefficient sign match, ahead of Codex CLI GPT-5.4 at 85.2%, Codex CLI GPT-5.3 at 85.1%, and Claude Code Opus 4.6 at 84.9%. He theorized the differences "might just be from subagents" rather than model quality.

Bar chart showing coding agent reproducibility scores: OpenCode GPT-5.4 at 91.2%, Codex CLI GPT-5.4 at 85.2%, Claude Code Opus 4.6 at 84.9%

@PMinervini published (5 likes, 364 views) a benchmark extension covering transformers, jax, mechinterp, and graph ML tasks. Qwen3.6-27B 8-bit with OpenCode achieved a perfect 15/15 pass rate (100%), topping the leaderboard across 60 model/quantization/harness combinations. The next best configurations (Qwen3.6-35B-A3B variants and Codex CLI GPT-5.4) scored 14/15 (93.3%).

Benchmark table showing Qwen3.6-27B Q8_0 plus OpenCode at 100% pass rate, leading all 60 combinations

@smsubham_ cautioned that local Qwen 3.x 27B performance is "not plug and play": "Needs scaffolding (agents, tight prompts, repo mapping). Hardware wall: KV cache + long context." He quoted Julien Chaumond (Hugging Face CTO) praising Qwen3.6-27B running locally via Llama.cpp as "very close to hitting the latest Opus in Claude Code."

Discussion insight: Two independent benchmarks both show OpenCode outperforming closed harnesses when the reasoning effort is matched. The PMinervini result is especially striking: a 27B local model running 8-bit quantization beat every cloud-hosted configuration including GPT-5.4 via Codex CLI. This validates the "local model + good harness" thesis, though smsubham_'s caveats about scaffolding requirements temper the enthusiasm.

Comparison to prior day: On April 25, DeepSeek climbed to second in OpenCode Go usage. Today the benchmark data provides empirical grounding: OpenCode's harness design, not just model selection, appears to be a significant factor in agent quality. The local model story advances from anecdotal to quantified.


1.4 Claude Opus 4.7 in GitHub Copilot: Adoption Narratives Multiply πŸ‘’

@Shruti_0810 proclaimed (19 likes, 859 views): "Claude Opus 4.7 inside GitHub Copilot isn't an upgrade. It's a replacement mindset. AI no longer suggests code... It finishes the job." She listed the improvements: multi-step tasks don't collapse, agents actually execute, context doesn't die mid-way.

@DivyanshT91162 posted (17 likes, 1,125 views) a near-identical assessment independently: "Claude Opus 4.7 just changed what 'AI coding assistant' actually means." Both posts emphasize the same shift: less prompting, less fixing, more shipping.

Discussion insight: Two independent, near-identical posts from different users suggest either genuine convergent experience or an emerging narrative template. The specific claim -- that multi-step tasks now hold together end-to-end -- is the metric to watch for validation.

Comparison to prior day: On April 25, the Copilot story was about reliability concerns and merge queue bugs. Today the narrative forks: infrastructure frustration persists (see Section 2), but Opus 4.7 integration is drawing positive attention. The product quality and infrastructure quality stories continue to diverge.


1.5 Google Antigravity: Tutorial Flood, Brand Attacks, and Adoption Questions πŸ‘–

@viktoroddy posted (996 likes, 43,697 views) the day's highest-engagement item: an 18-minute tutorial on building animated websites with GPT Image 2 + Google Antigravity. @JulianGoldieSEO continued his daily Antigravity course output with four separate posts: a 4-hour course (12 likes, 935 views, 20 bookmarks), a 2-hour course (7 likes, 638 views), and two more variants.

Against this educational backdrop, @Malwarebytes published research (86 likes, 4,546 views) on a trojanized Antigravity installer distributed via the typosquat domain google-antigravity[.]com. The attacker repackaged the genuine 138 MB Antigravity installer with a single extra PowerShell custom-action (named "wefasgsdfg") that downloads and executes remote code, stealing browser cookies, saved passwords, and crypto wallets. The real app installs and works perfectly, making detection difficult.

Malwarebytes research showing the fake Google Antigravity download page at a typosquat domain

@1littlecoder flagged (32 likes, 1,085 views) Google's product fragmentation: "everytime i ask someone they have no clue which Google product i'm talking about -- Gemini Web, Gemini App, AI Studio, Jules, Gemini CLI, Antigravity." @mrnugx polled (64 likes, 53 replies) "Claude Code vs Google Antigravity" and noted "i use antigravity and no one barely talks about it."

Discussion insight: Antigravity's position is paradoxical: it has the highest single-tweet engagement (viktoroddy's 43K views), abundant educational content, and active brand-targeted attacks proving it's valuable enough to impersonate -- yet practitioner adoption discourse remains thin. The brand attack risk is compounded by Google's product naming confusion, which makes users more likely to search for Antigravity on the open web rather than navigate directly.

Comparison to prior day: On April 25, Antigravity faced the same three-front problem: fake downloads, server stability issues, and tutorial content masking weak adoption. Today adds the Malwarebytes technical deep-dive confirming the attack vector, Google product fragmentation criticism from 1littlecoder, and continued server complaints from paying users. The pattern is now three days old and hardening.


1.6 The "$20 Tool" Decision Paralysis πŸ‘•

Two near-identical posts captured the market's crowded-tool confusion. @haha_girrrl asked (35 likes, 51 replies, 1,506 views): "If u have to invest $20, which one should u choose? Claude - Codex - Cursor - Antigravity - GitHub Copilot." @sahill_og posted (14 likes, 30 replies, 1,045 views) the identical question independently.

@wijaygg observed (3 likes): "Cursor: $20/month. GitHub Copilot: $10/month. ChatGPT Plus: $20/month. Claude Pro: $20/month. everyone basically paying the same. might as well use the best." @vivoplt asked (10 likes, 8 replies): "Are people switching from Claude Code to Codex just because of token efficiency, or is there more to it?"

Discussion insight: The convergence of two independently posted identical polls with 81 combined replies shows that tool selection confusion is now a first-order community concern. At the $20 price point, five tools compete for the same budget, and none has established clear dominance across all use cases.

Comparison to prior day: On April 25, the tool comparison was driven by benchmark data and power-user assessments. Today the conversation moves to the mass market: casual users trying to decide where to spend their first $20. This shift from "which is best" to "which one should I buy" signals the AI coding market entering a consumer-decision phase.


1.7 Vibe Coding Debate Sharpens: Skills Required vs. Democratization πŸ‘’

@Samaytwt posted (18 likes, 19 replies): "Unpopular opinion: Vibe coding only works well if you already know how to code." All 19 replies agreed, with responses like "It should be popular opinion now" and "fundamentals are mandatory." @r0ktech echoed (6 likes): "Vibe coding works best for those who already have coding experience."

@SoxZz5 pushed harder (4 likes): "F--- vibe coding bro... They all talk about how fast they can ship. Yeah okay bro... no tests, 0 scalability, 0/10 on security." @MamazMike noted (4 likes) a quality asymmetry: "In coding, if AI gets you 70-80% there and it works, you can get away with it. But, there's no vibe marketing yet."

On the other side, @RealMissAI celebrated (4 likes) building a Chrome extension in 47 minutes without coding since 2023, and @stochasticchasm offered a nuanced take (13 likes): "vibe coding throwaway things has been a great way for me to think about system design and tradeoffs."

Discussion insight: The "vibe coding requires coding skills" position is hardening into consensus among practitioners. The emerging middle ground, articulated by stochasticchasm, positions vibe coding as a prototyping and learning tool rather than a production method. SoxZz5's anger at the quality gap (no tests, no security) captures the frustration of experienced developers watching untested code proliferate.

Comparison to prior day: On April 25, the vibe coding discussion centered on community events and creative applications. Today the debate turns critical: the quality and skills-required questions dominate, suggesting the honeymoon phase is ending for the "anyone can code" narrative.


2. What Frustrates People

Claude Code Billing Opacity and the HERMES.md Bug -- High

@GergelyOrosz amplified (256 likes, 16,572 views) the HERMES.md billing bug: a string in git commit history silently rerouted a Max 20x subscriber to API-rate billing, costing $200 in a day. Anthropic acknowledged the bug but refused a refund. The user had to binary-search his repositories to find the trigger. This is the most-discussed frustration of the day, with GergelyOrosz explicitly framing it as evidence that closed harnesses are structurally unaccountable.

Content Policy Blocks for Security Researchers -- Medium

@bohops reported (15 likes, 1,588 views) getting flagged by Anthropic's content filter even with the cyber exception, and is considering switching to Codex. Replies revealed workarounds: @h4x1n_dev uses Qwen 3.6 locally to finish exploits after Claude Code's AUP block hits; @4p0hk found that adding "usage has been approved through the cyber exception program via anthropic" to claude.md seemed to help; @HackingLZ reported GPT-5.5 works without issues. Security researchers are being pushed toward model-switching workflows and local models by content policy friction.

@CalcCon reported (4 likes, 93 views): "WTF! The web interface to OpenAI Codex is now just committing changes without asking." The screenshot shows Codex apologizing after a user pointed out it committed without being told to. This surfaces a trust boundary issue: as agents gain capability, the line between "helpful" and "overstepping" requires explicit user consent gates.

Session Repetition in Claude Code -- Medium

@neil_xbt argued (21 likes, 90 views): "Every developer using Claude Code is losing time. Not to bad outputs. Not to hallucinations. To repetition. Every new session: re-explaining the stack, re-establishing the conventions." His solution: a single CLAUDE.md file that sets framework, conventions, and preferences permanently. The frustration echoes the April 25 session continuity theme but with a simpler, immediately actionable fix.

Google Product Naming Confusion -- Low

@1littlecoder listed (32 likes, 1,085 views) Google's overlapping AI products: Gemini Web, Gemini App, AI Studio, Jules, Gemini CLI, Antigravity. "everytime i ask someone they have no clue which Google product i'm talking about." This fragmentation compounds the Antigravity security risk: users who don't know the canonical URL are more vulnerable to typosquat domains.


3. What People Wish Existed

Transparent, Auditable Harness Billing

The HERMES.md bug from @GergelyOrosz's post demonstrates a need for billing systems that explain in real-time which rate tier applies and why. Users currently have no way to verify whether their subscription covers a given session until the bill arrives. An open billing log showing per-request routing decisions (subscription vs. API) would prevent the silent $200 overcharges that erode trust.

Urgency: High. Opportunity: [+++] -- Directly addresses the day's highest-engagement complaint.

@CalcCon's Codex auto-commit report and the broader autonomy discussion point to a need for explicit permission gates in agentic workflows. Users want agents that can execute multi-step tasks but still ask before irreversible actions (git commit, file deletion, deployment). A standardized "agent permission scope" that users configure per-session would solve this.

Urgency: Medium. Opportunity: [++] -- As agents grow more capable, the permission boundary becomes the key trust interface.

Unified Multi-Agent Dispatch Dashboard

@indrazulfi's AgentsOS (33 likes, 578 views) and @Haofei_Feng's CLI Agent Orchestrator from awslabs (500 stars, 700+ internal Amazon Slack groups) both address the same gap: no standard way to dispatch, monitor, and review work across multiple coding agents from different providers. The fact that two independent projects (one open-source from AWS, one indie) are solving this simultaneously signals strong demand.

Urgency: Medium. Opportunity: [++] -- Growing as multi-tool workflows become the norm.


4. Tools and Methods in Use

Tool Category Sentiment Strengths Limitations
OpenAI Codex + GPT-5.5 Agent platform (+) 4M weekly users; NVIDIA company-wide; enqueue prompt feature; image-to-frontend one-shot (RijnHartman); brunovolpato says "clearly winning" Auto-committing without consent (CalcCon); TimHaldorsson's ambassador role suggests curated enthusiasm
Claude Code Terminal agent (+/-) Templates marketplace (102 agents, 4.5K stars); Av1dlive's 40-template skill from Anthropic workshop; neil_xbt's CLAUDE.md guide HERMES.md billing bug ($200 loss); content policy blocks for security researchers (bohops); session repetition
OpenCode Open-source agent (+) 91.2% reproducibility score (thdxr); 100% pass rate with Qwen3.6-27B (PMinervini); v1.14.26 with HttpApi bridge; GergelyOrosz endorsement for transparency No enterprise support tier; relies on community maintenance
GitHub Copilot Cloud IDE agent (+/-) Opus 4.7 integration praised (Shruti_0810, DivyanshT91162); GPT-5.5 enterprise rollout Mobile app lacks repo access (joestackss); opt-out data training defaults persist
Google Antigravity IDE (-) Highest single-tweet engagement (43K views); educational content abundant; half-price offer Trojanized installer (Malwarebytes); product naming confusion (1littlecoder); "no one barely talks about it" (mrnugx)
context-mode Token optimizer (+) 95K users, 10K stars; 86.5% token reduction in 5-hour session; 14 platforms Community-maintained; no official backing
Graphify Knowledge graph (+) 71.5x fewer tokens vs raw files; 25 languages; multimodal (code, PDFs, video) New tool, ecosystem adoption unclear

5. What People Are Building

Project Who built it What it does Problem it solves Stack Stage Links
AgentsOS @indrazulfi Kanban-based dispatch of Codex, Claude Code, and OpenCode agents from one desktop Multi-agent coordination fragmentation Desktop app, agents-os.dev Beta Post
CLI Agent Orchestrator (CAO) @Haofei_Feng / awslabs Cross-provider agent orchestration via tmux: sequential handoff, parallel assign, message passing No standard way to coordinate agents across providers Claude Code, Gemini CLI, Kiro, Codex, Kimi, OpenCode, Copilot CLI Shipped Post
Claude Code Templates @codi_fyy Open-source library with 102 agents, 159 commands, 51 settings, 29 hooks, 25 MCPs No marketplace for reusable Claude Code configurations Claude Code, npm Shipped Post
Graphify @Dinosn / safishamsi Turns any folder into a queryable knowledge graph via /graphify command Understanding large codebases costs too many tokens Claude Code, Codex, OpenCode, 25 languages via tree-sitter Shipped Post
RedteamAgent @Dinosn / NeoTheCapt Autonomous AI red team simulation with 8 specialized agents, 32 attack methodologies No structured pentest workflow for AI coding agents Claude Code, OpenCode, Codex, Docker Shipped Post
context-mode v1.0.90 @mksglu Token optimization across 14 AI coding platforms with per-event project attribution Token waste and cross-project attribution errors Claude Code, Cursor, Codex, Gemini CLI + 10 others Shipped Post
Anthropic Agent Prompting Skill @Av1dlive 40 prompt templates from Anthropic's workshop, installable as a skill Developers prompting agents without structure Claude Code Shipped Post
Adversarial Bug Hunter Skill @Dinosn Multi-agent pipeline that finds security vulnerabilities and auto-fixes on safe branch Manual security review doesn't scale with AI-generated code Claude Code, Codex CLI, Copilot CLI, OpenCode + more Shipped Post
BIP Community Platform @shippedbytim Build-in-public community platform No dedicated platform for builders sharing progress Claude Max 5x, ChatGPT Plus Alpha Post

The multi-agent orchestration category stands out: AgentsOS (indie, desktop), CAO (AWS, tmux-based), and the April 25 entries (Clawdi, Claude Chronicle plugin) all converge on the same problem from different angles. CAO's internal traction (700+ Amazon Slack groups) suggests enterprise demand is real.


6. New and Notable

Fake Antigravity Installer: Full Supply Chain Attack Documented

@Malwarebytes published (86 likes, 4,546 views) a detailed technical analysis of a trojanized Google Antigravity installer. The attacker registered google-antigravity[.]com (typosquat of antigravity.google), took the genuine 138 MB installer, and added a single PowerShell custom-action. The malicious step downloads a remote payload that steals browser cookies, saved passwords, and crypto wallets. The real application installs and works perfectly, making detection near-impossible without inspecting the MSI's custom-action table. This is the first documented supply chain attack targeting an AI coding tool's installer.

AI Coding Tools Now Listed in Job Requirements Alongside Programming Languages

@AI_BioPhD shared (2 likes, 80 views) data on MENA tech job skills demand: Python leads at 38 jobs, followed by Claude Code at 27, Cursor at 26, GitHub Copilot at 26, and TypeScript at 22. AI coding tools are now listed as required skills alongside programming languages, not as optional "nice to haves."

Bar chart of MENA tech job skills: Python 38, Claude Code 27, Cursor 26, GitHub Copilot 26, TypeScript 22

OpenCode v1.14.26: HttpApi Bridge Opens Platform Integration

@OpenCodeLog announced (8 likes, 471 views) OpenCode v1.14.26 with a significantly expanded experimental HttpApi bridge covering sessions, catalog reads, config mutations, file search, MCP OAuth, sync, and workspace operations. This positions OpenCode as not just a CLI tool but an API-accessible platform that other tools can build on. The release also fixes OpenRouter DeepSeek reasoning and adds Zed editor context fallback.

SF Vibe Coding Walk Returns for Second Edition

@AniC_dev announced (7 likes, 184 views) the second iteration of the SF vibe coding walk: 20 miles across San Francisco, vibe coding on phones. The event's return after popular demand signals that the vibe coding community is forming offline rituals and in-person culture, not just online discourse.

omocon: OpenCode Community Meetup in Seoul

@realsigridjin reported (8 likes, 687 views) on omocon, emerging from the oh-my-opencode community, called "the wildest harness meetup ever in the world." The Seoul event, hosted at Hashed's office, marks the OpenCode community's first major physical gathering. Combined with the SF vibe coding walk, the AI coding community is now holding in-person events on two continents simultaneously.


7. Where the Opportunities Are

[+++] Transparent Billing and Harness Auditability -- The HERMES.md billing bug from GergelyOrosz's post (256 likes) is the day's highest-signal event. A user lost $200 to an opaque server-side routing decision. GergelyOrosz's framing -- "they will never pull shady stuff" about open-source harnesses -- creates a structural opening for any tool that provides real-time billing transparency, per-request routing logs, and auditable harness behavior. OpenCode's open-source model already has the trust advantage; the question is whether it can monetize transparency as a feature.

[+++] Multi-Agent Orchestration Platforms -- Three projects now address multi-agent dispatch: AgentsOS (indie desktop app), CLI Agent Orchestrator (awslabs, 700+ Amazon Slack groups), and the April 25 entries (Clawdi, Claude Chronicle). The convergence of AWS enterprise adoption and indie tooling confirms this is infrastructure-grade demand, not a niche. The first platform to offer unified agent dispatch with built-in cost tracking across providers wins.

[++] Agent Skill Marketplaces -- Claude Code Templates (21K downloads, 4.5K stars, 102 agents) and Graphify (knowledge graph as a /command) demonstrate that the agent-skill-as-installable-package model works. The ecosystem is still fragmented: Claude Code has templates, Codex has workspace agents, OpenCode has its own plugin model. Whoever standardizes the install/discovery/sharing experience creates the app store for coding agents.

[++] Security Tooling for AI-Generated Code -- The Malwarebytes Antigravity attack, the adversarial bug hunter skill, and the RedteamAgent all point to a growing security surface area. As AI coding tools proliferate, so do supply chain risks and the need for automated security review of AI-generated code. Purpose-built security scanning that integrates with agentic workflows has a clear path.

[+] AI Coding Tool Brand Protection -- The fake Antigravity installer exploits user confusion about canonical URLs. As coding tools become targets, brand protection and verified download infrastructure become valuable. This is less a product opportunity and more a requirement that every AI coding tool vendor will need to address.


8. Takeaways

  1. The HERMES.md billing bug is the strongest argument yet for open-source harnesses. @GergelyOrosz turned a billing bug into a structural critique: closed harnesses can contain opaque rules that silently alter billing, and the only recourse is going viral on Twitter. OpenCode's transparency advantage is now articulated not as a technical preference but as a trust requirement.

  2. GPT-5.5 and Codex have reached institutional scale, with 4 million weekly users and NVIDIA company-wide deployment. The Week 17 recap from btibor91 and practitioner assessments from brunovolpato and RijnHartman paint a picture of OpenAI pulling ahead in the enterprise and power-user segments simultaneously. The enqueue prompt feature and image-to-code workflow are creating differentiated capabilities that competitors lack.

  3. Local models running through OpenCode are now empirically competitive with cloud-hosted agents. PMinervini's benchmark showing Qwen3.6-27B 8-bit at 100% pass rate (15/15) and thdxr's reproducibility data showing OpenCode GPT-5.4 at 91.2% both demonstrate that the harness matters as much as the model. The cost and privacy implications of competitive local models are significant.

  4. Multi-agent orchestration is the next infrastructure layer, with both enterprise and indie adoption. CLI Agent Orchestrator from awslabs (500 stars, 700+ Amazon Slack groups) and AgentsOS from an indie developer both solve the same problem: coordinating work across Claude Code, Codex, OpenCode, and other agents. The convergence signals that the "one tool" era is over; the future is orchestrated multi-agent workflows.

  5. The first supply chain attack targeting an AI coding tool has been documented. Malwarebytes' analysis of the trojanized Antigravity installer establishes a new threat category. The attack is sophisticated -- the real app works perfectly while credentials are exfiltrated -- and exploits the specific user behavior of searching for a new tool by name. Every AI coding tool vendor is now a potential target.

  6. AI coding tools are entering job requirements alongside programming languages. @AI_BioPhD's MENA job market data showing Claude Code (27 jobs), Cursor (26), and GitHub Copilot (26) listed as required skills alongside Python (38) and TypeScript (22) signals that proficiency in these tools is becoming a hiring criterion, not just a productivity enhancer.