claude-code-hooks → Black Hat Europe 2026 Arsenal. Head of AI @ArmorCode. Building in public, 3,200+ stars on GitHub. https://teapawt.org/t.co/3x4YJWexgx
Joined October 2012
- Tweets1.5K
- Following41
- Followers654
- Likes1.9K
Karan Bansal retweeted
The bug is like a joke.
On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀
‼️ BREAKING: OpenSSH has rushed out a fix for a critical flaw that lets attackers log into some Linux servers without the right password.
The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.
It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".
Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.
Karan Bansal retweeted
Some news: I’m joining OpenAI to lead product management for Core Products!
I have a lot of respect for OpenAI for showing the world that scaling works, for bringing AI to over a billion people, and for believing great products are core to the mission.
I’m excited to work with @thsottiaux, an incredible PM team, and everyone across OpenAI. Together, we’ll build agents that have your back and your team’s, and keep you in control, so you get more time for the people and work you love.
Lots to learn, and lots to build. Please keep your feedback coming!
Karan Bansal retweeted
From a startup founder: “it’s now a red flag for me if I don’t see side projects on someone’s resume / application, because it signals lack of autonomy. Because it’s now so trivial to build anything on the side, vs before.”
Same Milky Mist paneer. ₹92 on Instamart, ₹120 on Zepto and Blinkit. That's 23% more for the same block 🧀
Bachat Bhai now runs in Claude too. It checks Instamart, Zepto, Blinkit and Flipkart Minutes and tells you where your cart is cheapest.
github.com/amishah1998/bacha…
₹718 more on Instamart. Same 7 Diwali items 😭
Same cashews too. ₹744 there, ₹521 on Zepto.
@ami_shah1 and I built Bachat Bhai to do the app-hopping for you.
It compares the final bills, fees and all. Fills the cheaper cart, asks before ordering.
Bhai found a ₹200 coupon we'd missed too.
Free on Grok Bot x.ai/bot/Xfry0mJwTEklwncrE8Q…
@poteto we gave Grok Bot a very Indian job
@ZeptoNow you won this round
Karan Bansal retweeted
Day 26/ You can now easily switch between multiple accounts on mobile, and coming soon to desktop too. Next two days will be resets… banked… do with this what you may 👀.
help.openai.com/en/articles/…
Karan Bansal retweeted
We’re renaming our Max plans:
Max 5x → Max
Max 20x → Ultra
Max is still $100/month, and Ultra is still $200. If you’re a subscriber, there’s nothing you need to do.
We’re also removing the 5-hour limit for verified Ultra accounts, starting today with most existing subscribers. Newer accounts keep a temporary limit until they’re verified, which helps us prevent fraud and abuse. You'll get an email when it's removed.
Weekly limits remain unchanged. View our plans here: claude.com/pricing
Wait, WHAT?
Uninstalling the malicious Claude Code extension may leave attacker scripts behind.
For future installs and updates, consider a 72-hour cooldown in Cursor. Set extensions.installCooldownHours to 72.
If you installed v2.1.313 through Cursor, don't stop at updating. Follow the full cleanup steps in Cursor's notice.
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor.com/marketplace, Grok Bot, Grok or our other SpaceXSI products.
In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk.
If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: cursor.com/blog/claude-code-…
₹718 more on Instamart. Same 7 Diwali items 😭
Same cashews too. ₹744 there, ₹521 on Zepto.
@ami_shah1 and I built Bachat Bhai to do the app-hopping for you.
It compares the final bills, fees and all. Fills the cheaper cart, asks before ordering.
Bhai found a ₹200 coupon we'd missed too.
Free on Grok Bot x.ai/bot/Xfry0mJwTEklwncrE8Q…
@poteto we gave Grok Bot a very Indian job
@ZeptoNow you won this round
Ask Claude Code for a token usage mod and get source links plus the access the scan reported.
I built mod-finder to search the Claude Mods catalogue from a session. Two read-only MCP tools. The catalogue is cached locally; Claude gets matching records.
The clip is a real search, with no mod installs. Reported access isn't a safety guarantee.
mods.aidojo.si/
A mod can reach the network through a process it starts.
Of the 5,500 mods with a full validator report in my catalogue, 9.8% call $.http.fetch. 41% call methods that start processes, which get your network access.
I'd check $.process.run and $.process.spawn alongside $.http.fetch in the output from
claude plugin validate ./path/to/mod
Those groups can overlap. The validator lists calls found in source; it doesn't monitor the traffic of a running mod.
I maintain the catalogue.
mods.aidojo.si/access/
Was Claude slow, or was it your npm test?
My Claude Code now answers that after every turn. In this one, Claude took 15 seconds and npm test took 27.
Its own "Worked for" line gives you one number. This splits it and names the command.
Free mod, zero tokens. Claude never reads the line.
github.com/karanb192/time-bl…
plot twist: tibo bought poteto.com
$4,988 on Afternic. registrar flipped to GoDaddy 18h before this tweet. mashed @poteto on the house was foreshadowing lmao
A two-line recap can mean rewriting the whole cache.
Fresh demo of Cache Tax for Claude Code:
• Shows the cost before a cold send, with an option to block it.
• Sends warming pings during breaks, for a window you choose.
• Checks each ping’s usage and stops if the cache is cold.
Pings cost tokens. Dollar figures are API-equivalent estimates, not extra subscription charges.
cachetax.aidojo.si/
I asked Claude Code for a two-line recap. My plugin stopped the send with a $6.61 estimate just to rewrite the old context.
330k tokens, 15 days idle. That's at Fable 5.1 API rates; on Max it's a cost estimate, not a charge.
I sent it again. The cache write came back at $6.28, and keepwarm armed for three hours.
cache-tax is free and open source. This is the real run.
claude-code-mods.karanbansal…
359 Claude Code mods in one searchable directory.
I gave the community list I maintain a website. Find a browser for your terminal, a PR tracker, or something to make the wait more fun 😅
You can also check the access reported by Claude's validator before installing.
mods.aidojo.si/
Karan Bansal retweeted
Super excited to be interviewing @poteto, live, in ~48 hours on YouTube.
We'll be nerding out about skills, high-velocity software factories, and learning SOTA techniques for shipping with agents.
This Friday - 9AM PT. Don't miss it!
youtube.com/live/MN9dGgmLyso
I blocked Claude Code from running an install script off the internet. So it asked me to run the same command myself.
My guardrail can stop the AI. It cannot stop the AI from asking me.
claude-code-hooks goes to Black Hat Europe 2026 Arsenal.
github.com/karanb192/claude-…