Snack Pack #4: Check what your editor let in
Week of Oct 30–Nov 5, 2026 · 7 snacks · ~8 min
One bad extension can leave a key behind.
Cursor pulled a fake Claude Code build from its marketplace after it tried to plant an SSH backdoor, while Claude Code, the Gemini API and OpenAI put dates on fast mode, older models and a shared ChatGPT and Codex allowance.
Claude Code also fences in file edits, and Copilot moves into JetBrains Air.
Nutrition Facts
Serving: 1 Snack Pack · ~8 min
Counts from this issue · 14 cards · Hype: 0 g.
Here’s what changed in your agent tools. Every bite links to its source. No funding fluff. No “AI will change everything.” Just what shipped, what changed, and why it might matter to you. A fresh pack lands every Thursday.
Cursor Claude Code malware: check SSH keys
Action needed: a tampered Claude Code extension in Cursor’s extension marketplace tries to plant an SSH backdoor. Cursor’s Oct 29, 2026 notice says versions 2.1.312 and 2.1.313 were not made by Anthropic and were live from about 5:27 a.m. to 4:35 p.m. ET that day.
If you installed or updated either in that window, check for the svc-telemetry key now.
Who cares Anyone who installed or updated the Claude Code extension from Cursor’s marketplace on Oct 29, 2026, and the people who look after their machines.
Opus 4.8 fast mode in Claude Code ends Nov 30
Action needed: Claude Code deprecated fast mode for Opus 4.8 as of Oct 30, 2026, and removes it on Nov 30, 2026. After that, fast mode requests on Opus 4.8 return an error and don’t fall back to standard Opus 4.8.
Who cares Claude Code users who run Opus 4.8 in fast mode.
Gemini 2.5 Pro and Flash reroute on Dec 1
Action needed: Google deprecated gemini-2. and gemini-2. in the Gemini API on Nov 2, 2026. From Dec 1, 2026, requests to them go to newer models automatically and are billed at those models’ rates.
Who cares Developers whose apps or agents call gemini-2.5-pro or gemini-2.5-flash in the Gemini API.
Source: Gemini API release notes, Nov 2, 2026 · Google docs: Gemini API deprecation schedule
ChatGPT and Codex will share one usage limit in December
Billing change: starting in December, Plus, Pro and Business plans get one usage allowance shared across ChatGPT and Codex. OpenAI’s Help Center page on the change went up on Oct 31, 2026, and says usage will be measured in tokens.
Who cares ChatGPT Plus, Pro and Business users who also code with Codex.
Source: OpenAI Help Center: understanding ChatGPT and Codex usage limits, Oct 31, 2026
Claude Code: block edits outside your project
Keep Claude Code’s file edits inside your project folders. A new setting, permissions., makes the Write, Edit and NotebookEdit tools refuse paths outside your working directories. The release came out late on Oct 29, 2026.
Who cares Claude Code users who want file edits fenced to the project they’re working in.
Claude API message threads send only new turns
Long agent loops can stop re-uploading the whole conversation every turn. Message threads, in beta on the Claude Messages API since Nov 2, 2026, keep the conversation on the server so each later request carries only the new messages, with a lower time to first token.
Who cares Developers who run long conversations or agent loops on the Claude Messages API.
Source: Claude Platform release notes, Nov 2, 2026 · Claude docs: how message threads work
Copilot now runs inside JetBrains Air
Your Copilot plan now doubles as an agent inside JetBrains Air. Since Nov 3, 2026, you can pick GitHub Copilot in Air’s agent picker, hand it coding tasks in your JetBrains IDE or in the cloud, and review the changes next to your code.
Who cares JetBrains IDE users who already pay for GitHub Copilot, plus Air Teams admins.
Source: GitHub Changelog: GitHub Copilot is now available in JetBrains Air, Nov 3, 2026
What’s an authorized_keys file?
SSH signs you in with a key pair instead of a password.
The private key stays with you and works like a password, and the public key goes on the machine you want to reach, in a plain text file called authorized_ in your .ssh folder (administrator accounts on Windows use administrators_ instead).
When someone connects, the SSH server checks their private key against the public keys it has, so a key in that file lets whoever holds its private half sign in (Microsoft Learn: key-based authentication in OpenSSH for Windows).
Try this: if you have an authorized_ file, open it and make sure you recognize every key in it, then read our Cursor Daily for the key name to look for. New here? Start here.
Source: Microsoft Learn: key-based authentication in OpenSSH for Windows
Your ChatGPT chats are about to share a meter with Codex
Starting in December, ChatGPT and Codex share one allowance. One meter will pay for your ChatGPT chats and your Codex runs, and plenty of people are nervous about running dry halfway through a task. OpenAI’s own help pages already answer most of the worry.
They say what draws from that allowance, what never touches it, where to see what’s left and what you can do when it runs out. Here’s that map, with no guesses about how fast anyone’s allowance will drain.
Full Main Course: 7-min read
Sources
- OpenAI Help Center: understanding ChatGPT and Codex usage limits
- OpenAI Help Center: using Codex with your ChatGPT plan
- OpenAI Help Center: using credits in ChatGPT personal plans
Show all 4 sourcesShow fewer
Decide when your VS Code extensions update
Try it now:
- In a terminal, run
code --list-extensions --show-versionsto see every extension VS Code has installed and which version you’re on. - To update by hand instead, run the Disable Auto Update for Extensions command (or change the
extensions.setting), and run Enable Auto Update for Extensions to switch it back on.auto Update - To go back to a release you trust, right-click the extension in the Extensions view, choose Install Another Version and pick one from the list.
Claude’s new mobile app updates are here
Plays from YouTube when you press play.
Video Summary
- You can stay signed in to two Claude accounts on your phone. Switch between work and personal without signing out, and photos also show up in the chat as soon as you pick them.
- On iPhone Duo and iPad, a chart or anything else Claude makes opens in its own column beside the chat, so you can read it and ask for changes at the same time. Chromebooks and foldables get a resizable sidebar, right-click and the Claude Desktop keyboard shortcuts.
- Voice mode answers sooner, hears you better in a noisy room and works with Apple CarPlay on iPhone. Menus and settings now come in 33 languages, and pull-down search is on the way for iPhone and iPad (it’s already on web and desktop).
On screen: A presenter talks between screen recordings and title cards.
A chart opens beside the chat on a folding iPhone, an account switcher lists Work and Personal, Android runs in a laptop-style layout on a Chromebook, voice mode listens on an Apple CarPlay screen, the app menus appear in other languages, and a preview shows pull-down search on iPhone.
After watching you can: Keep your work and personal Claude accounts signed in on one phone, ask Claude something through CarPlay on a drive, and switch the app’s menus to your own language.
Short on time? Watch just:
Grafana MCP server
Attach a Grafana datasource to your chat the way you’d attach a file. Grafana’s official server now lists datasources as MCP resources for clients with a resource picker, adds opt-in CloudWatch Logs Insights queries, and stops opening the interactive chart from every Prometheus or Tempo query (a breaking change).
Source: mcp-grafana v2.2.0 release notes
Playwright MCP
Keep two sign-ins apart in one browser.
Microsoft’s browser server can now open tabs in separate named sessions that don’t share cookies or storage, blank out access tokens and other URL values you name in its replies (Microsoft calls that a convenience, not a security feature), and cap how many matches a page search returns.
Most of the pack’s news came with a date attached
- Claude Code now warns in
/schedulewhen a new cloud scheduled task picks up connectors you didn’t ask for (our Daily), and headlessclaude -pjobs get a heads-up before a stored sign-in runs out (our Daily). - Two Main Courses from Oct 30 are worth a catch-up. Copilot Fusion’s bill explains when one prompt calls several models, and Claude Duet, one week in shows how two early users run it.
That’s the pack. Pass a snack to a friend.