Knostic discovers and secures AI agents and coding assistants, as well as associated supply chain risks, including MCP servers, skills, IDE extensions, and rules. We detect shadow AI, block data exfiltration, and stop destructive commands like rm -rf.
Analyzing Two Malicious VS Code Extensions Hidden Behind a WordPress Tool
21 July 2026



