TerminalBlogIndependent coverage of the AI coding agent ecosystem — security bugs, real adoption data, comparisons, and what actually ships. Claude Code, Cursor, Hermes, Codex, OpenCode, and more.2026-08-28T00:00:00.000Zhttps://terminalblog.com/Anshadhttps://terminalblog.com/favicon.svghttps://terminalblog.com/blog/ai-agents-atrophying-developer-brains-hn-threads/<![CDATA[AI Coding Agents Are Atrophying Developer Brains — What 200+ HN Comments Reveal]]>2026-08-28T00:00:00.000Z2026-08-28T00:00:00.000ZAnshadhttps://terminalblog.com/blog/beware-claude-code-security-guidance-leaks-oauth-tokens/<![CDATA[Beware: Claude Code's Security-Guidance Plugin Leaks Your OAuth Tokens Into the Transcript]]>2026-08-28T00:00:00.000Z2026-08-28T00:00:00.000ZAnshadhttps://terminalblog.com/blog/what-developers-think-ai-coding-agents-hn-discussion/<![CDATA[What Developers Really Think About AI Coding Agents — Raw Truth From 200+ HN Comments]]>2026-08-28T00:00:00.000Z2026-08-28T00:00:00.000ZAnshadhttps://terminalblog.com/blog/what-developers-think-ai-coding-expertise-collapse-hn/<![CDATA[What Developers Actually Think About AI Coding Expertise Collapse — From 500+ HN Comments]]>2026-08-25T00:00:00.000Z2026-08-25T00:00:00.000ZAnshadhttps://terminalblog.com/blog/beware-cline-kanban-websocket-rce/<![CDATA[Beware: Cline Kanban WebSocket Hijack Lets Any Website Steal Your Code & Run Commands (CVE-2026-44211)]]>2026-08-24T00:00:00.000Z2026-08-24T00:00:00.000ZAnshadhttps://terminalblog.com/blog/coding-agent-weekly-2026-08-24/<![CDATA[Coding Agent Weekly — 2026-08-24]]>2026-08-24T00:00:00.000Z2026-08-24T00:00:00.000ZAnshadhttps://terminalblog.com/blog/openai-gpt-5-6-pricing-crash-changes-agent-economics/<![CDATA[OpenAI Just Slashed GPT-5.6 Prices 80% — Coding Agents Got Way Cheaper]]>2026-08-23T10:00:00.000Z2026-08-23T10:00:00.000ZAnshadhttps://terminalblog.com/blog/hermes-agent-allowlist-bug-security-boundaries/<![CDATA[Hermes Agent's Allowlist Bug: When Security Boundaries Disagree]]>2026-08-23T00:00:00.000Z2026-08-23T00:00:00.000ZAnshadhttps://terminalblog.com/blog/what-developers-think-codex-vs-claude-hn-2026/<![CDATA[What Developers Actually Think About Codex vs Claude — From 221 HN Comments]]>2026-08-23T00:00:00.000Z2026-08-23T00:00:00.000ZAnshadhttps://terminalblog.com/blog/cursor-spacex-acquisition-ai-coding-agent-war/<![CDATA[Cursor Just Got Acquired by SpaceX — The AI Coding Agent War Entered a New Era]]>2026-08-22T00:00:00.000Z2026-08-22T00:00:00.000ZAnshadhttps://terminalblog.com/blog/hermes-agent-zip-update-silent-data-loss/<![CDATA[Hermes Agent's ZIP Update Fallback Silently Destroys Your Local Patches — Windows Users, Check Your Repo]]>2026-08-22T00:00:00.000Z2026-08-22T00:00:00.000ZAnshadhttps://terminalblog.com/blog/what-developers-think-ai-agents-hn-200-comments/<![CDATA[What Developers Actually Think About AI Coding Agents — From 200+ HN Comments]]>2026-08-22T00:00:00.000Z2026-08-22T00:00:00.000ZAnshadhttps://terminalblog.com/blog/beware-opencode-context-integrity-pruning-injection/<![CDATA[Beware: OpenCode's Context Management Silently Deletes Your Constraints and Injects Unauthorized Actions]]>2026-08-21T14:00:00.000Z2026-08-21T14:00:00.000ZAnshadhttps://terminalblog.com/blog/google-antigravity-killed-gemini-cli-terminal-ai-war/<![CDATA[Google Just Killed Gemini CLI — Antigravity 2.0 Is the New Terminal King]]>2026-08-20T00:00:00.000Z2026-08-20T00:00:00.000ZAnshadhttps://terminalblog.com/blog/what-developers-think-coding-agents-hn/<![CDATA[Anthropic's Lock-In Play and Opus 5's 'Agent Speak' — What 300+ HN Developers Revealed This Week]]>2026-08-20T00:00:00.000Z2026-08-20T00:00:00.000ZAnshadhttps://terminalblog.com/blog/claude-code-v2-1-235-spellcheck-performance-fixes/<![CDATA[Claude Code Just Got Spellcheck — And Fixed 15 Things You've Been Complaining About]]>2026-08-19T00:00:00.000Z2026-08-19T00:00:00.000ZAnshadhttps://terminalblog.com/blog/jetbrains-ai-coding-agent-adoption-survey-2026/<![CDATA[The AI Coding Agent Race Just Flipped — Claude Code Is Now Twice as Popular as Copilot]]>2026-08-19T00:00:00.000Z2026-08-19T00:00:00.000ZAnshadhttps://terminalblog.com/blog/beware-agentjacking-sentry-mcp-hijacks-claude-code-cursor-codex/<![CDATA[Agentjacking: Fake Sentry Bug Hijacks 100+ AI Coding Agents]]>2026-08-18T00:00:00.000Z2026-08-18T00:00:00.000ZAnshadhttps://terminalblog.com/blog/beware-cursor-duneslide-rce-cve-2026-50548-50549/<![CDATA[Beware: Cursor DuneSlide — Two Critical RCE Vulnerabilities (CVE-2026-50548, CVE-2026-50549) Let Attackers Escape the Sandbox via Zero-Click Prompt Injection]]>2026-08-18T00:00:00.000Z2026-08-18T00:00:00.000ZAnshadhttps://terminalblog.com/blog/claude-code-just-patched-credential-leak-cross-session-messaging/<![CDATA[Claude Code Just Patched Its Credential Leak — And Made Sessions Talk Across Machines]]>2026-08-18T00:00:00.000Z2026-08-18T00:00:00.000ZAnshadhttps://terminalblog.com/blog/claude-code-v2-1-234-ntlm-leak-fixed-50-fixes/<![CDATA[Claude Code Just Patched the NTLM Credential Leak — And 50 Other Fixes You'll Actually Feel]]>2026-08-18T00:00:00.000Z2026-08-18T00:00:00.000ZAnshadhttps://terminalblog.com/blog/cursor-origin-code-hosting-agents-every-repo/<![CDATA[Cursor Just Got Acquired by SpaceX — And Launched Origin, Its Agent-Native Code Host]]>2026-08-18T00:00:00.000Z2026-08-20T00:00:00.000ZAnshadhttps://terminalblog.com/blog/hermes-agent-v0-20-4-patch-74-prs-glass-ui-bot-mode/<![CDATA[Hermes Agent Just Dropped v0.20.4 — 74 PRs in 48 Hours, Glass UI, and Bot Mode That Actually Works]]>2026-08-18T00:00:00.000Z2026-08-18T00:00:00.000ZAnshadhttps://terminalblog.com/blog/openhands-1-14-git-sync-free-kimi-breakthrough/<![CDATA[OpenHands Just Added the Git Sync Button Everyone Begged For — And Made Kimi K3 Free by Default]]>2026-08-18T00:00:00.000Z2026-08-18T00:00:00.000ZAnshadhttps://terminalblog.com/blog/what-developers-think-ai-coding-without-vibes-hn/<![CDATA[What Developers Think About AI Coding Without the Vibes — From 55 HN Comments]]>2026-08-18T00:00:00.000Z2026-08-18T00:00:00.000ZAnshadhttps://terminalblog.com/blog/zed-v1-16-pre-gemini-flash-git-panel-mermaid/<![CDATA[Zed Just Added Gemini 3.6 Flash — And Made Git Panel Actually Usable]]>2026-08-18T00:00:00.000Z2026-08-18T00:00:00.000ZAnshadhttps://terminalblog.com/blog/beware-claude-code-trust-dialog-bypass-cve-2026-33068/<![CDATA[Claude Code Silently Skipped Your Security Prompt — Malicious Repos Could Disable It]]>2026-08-17T18:00:00.000Z2026-08-17T18:00:00.000ZAnshadhttps://terminalblog.com/blog/github-copilot-cli-1-0-80-ahp-shared-sessions/<![CDATA[GitHub Copilot CLI Just Made Shared Terminal Sessions Real — Here's Why It Changes Everything]]>2026-08-17T10:00:00.000Z2026-08-17T10:00:00.000ZAnshadhttps://terminalblog.com/blog/coding-agent-weekly-2026-08-17/<![CDATA[Coding Agent Weekly — 2026-08-17]]>2026-08-17T00:00:00.000Z2026-08-17T00:00:00.000ZAnshadhttps://terminalblog.com/blog/hermes-agent-v0-20-2-patch-release-desktop-gateway-cli/<![CDATA[Hermes Agent v0.20.2 Just Landed — 397 Fixes in 3 Days, Desktop & Gateway Get Major Polish]]>2026-08-17T00:00:00.000Z2026-08-17T00:00:00.000ZAnshadhttps://terminalblog.com/blog/hermes-agent-v0-20-3-patch-mcp2-bot-mode-commandcode/<![CDATA[Hermes Agent Just Dropped v0.20.3 — MCP 2.x, Bot Mode, and Self-Healing Cron in One Patch]]>2026-08-17T00:00:00.000Z2026-08-17T00:00:00.000ZAnshadhttps://terminalblog.com/blog/beware-cursor-cli-worktree-pre-trust-rce/<![CDATA[Beware: Cursor CLI Ran Your Attacker's Code Before You Clicked 'Trust' — Pre-Trust RCE in Worktree Setup]]>2026-08-16T12:00:00.000Z2026-08-16T12:00:00.000ZAnshadhttps://terminalblog.com/blog/hermes-agent-v0-20-1-patch-release-656-fixes/<![CDATA[Hermes Agent v0.20.1 Just Dropped — 656 Fixes, One Stable Release]]>2026-08-16T00:00:00.000Z2026-08-16T00:00:00.000ZAnshadhttps://terminalblog.com/blog/openclaw-v2026-8-1-beta2-secret-egress-gpt5-macos-profiles/<![CDATA[OpenClaw Just Made Your Secrets Impossible to Leak — And Added GPT-5.6 Support]]>2026-08-16T00:00:00.000Z2026-08-16T00:00:00.000ZAnshadhttps://terminalblog.com/blog/pi-v0-84-2-fullscreen-transcript-search-configurable-tools/<![CDATA[Pi Just Got Fullscreen Transcript Search — And It Changes How You Find Things]]>2026-08-16T00:00:00.000Z2026-08-16T00:00:00.000ZAnshadhttps://terminalblog.com/blog/zed-delta-multiplayer-coding-agents-private-beta/<![CDATA[Zed Just Launched Delta — The First Multiplayer IDE Where Agents Are First-Class Teammates]]>2026-08-16T00:00:00.000Z2026-08-16T00:00:00.000ZAnshadhttps://terminalblog.com/blog/zed-just-got-gpt-5-6-luna-and-self-hosted-ai-models/<![CDATA[Zed Just Got GPT-5.6 Luna Support — And Self-Hosted AI Models Too]]>2026-08-16T00:00:00.000Z2026-08-17T00:00:00.000ZAnshadhttps://terminalblog.com/blog/cursor-cloud-agents-3x-faster-builds/<![CDATA[Cursor Just Made Cloud Agents 3x Faster — Here's Why It Changes Everything]]>2026-08-15T14:00:00.000Z2026-08-15T14:00:00.000ZAnshadhttps://terminalblog.com/blog/opencode-v1-18-18-reliability-mcp-desktop-overhaul/<![CDATA[Opencode Just Became the Open-Source Coding Agent You Can Actually Trust]]>2026-08-15T14:00:00.000Z2026-08-15T14:00:00.000ZAnshadhttps://terminalblog.com/blog/pi-coding-agent-just-got-massive-upgrade-fullscreen-breaking-changes/<![CDATA[Pi Coding Agent Just Got a Massive Upgrade — Fullscreen TUI, Breaking Session Model, and Transcript Search]]>2026-08-15T09:00:00.000Z2026-08-15T09:00:00.000ZAnshadhttps://terminalblog.com/blog/ai-agents-keep-deleting-production-databases-pattern/<![CDATA[AI Agents Keep Deleting Production Databases — The Pattern Nobody's Fixing]]>2026-08-15T00:00:00.000Z2026-08-15T00:00:00.000ZAnshadhttps://terminalblog.com/blog/claude-code-v2-1-233-security-fix-windows-ntlm-leak/<![CDATA[Claude Code Just Patched a Nasty Windows Credential Leak — Here's Why It Matters]]>2026-08-15T00:00:00.000Z2026-08-15T00:00:00.000ZAnshadhttps://terminalblog.com/blog/cline-v4-1-10-web-search-lands/<![CDATA[Cline Just Learned to Search the Web — And It Changes How You Code]]>2026-08-15T00:00:00.000Z2026-08-15T00:00:00.000ZAnshadhttps://terminalblog.com/blog/kilocode-v7-4-22-clickable-refs-agent-manager-pr-actions-aws-gcp-auth/<![CDATA[Kilo Code v7.4.22 Makes File References Clickable, Adds Agent Manager PR Actions & AWS/GCP Auth]]>2026-08-15T00:00:00.000Z2026-08-15T00:00:00.000ZAnshadhttps://terminalblog.com/blog/openclaw-2026-8-1-beta2-secret-egress-gpt56-macos-profiles/<![CDATA[OpenClaw Just Dropped Secret Egress Host Binding — GPT-5.6 Ultra, macOS Profiles & SQLite Snapshots Land]]>2026-08-15T00:00:00.000Z2026-08-15T00:00:00.000ZAnshadhttps://terminalblog.com/blog/openhands-v1-13-conversation-archive-markdown-artifacts-context-meter/<![CDATA[OpenHands v1.13 Just Added Conversation Archive, Markdown Artifact Previews & a Context Window Meter]]>2026-08-15T00:00:00.000Z2026-08-15T00:00:00.000ZAnshadhttps://terminalblog.com/blog/what-developers-think-glm53-chinese-models-hn/<![CDATA[What Developers Think About GLM-5.3 and the Shift to Chinese Models — From 500+ HN Comments]]>2026-08-15T00:00:00.000Z2026-08-15T00:00:00.000ZAnshadhttps://terminalblog.com/blog/claude-code-just-made-subagents-free-and-they-remember-everything/<![CDATA[Claude Code Just Made Subagents Free — And They Remember Everything]]>2026-08-14T14:00:00.000Z2026-08-14T14:00:00.000ZAnshadhttps://terminalblog.com/blog/goose-v1-46-unrolled-agent-loop-hooks-cost-tracking/<![CDATA[Goose v1.46 Just Dropped the Biggest Feature Wave Since v1.40 — Here's What Actually Matters]]>2026-08-14T11:00:00.000Z2026-08-14T11:00:00.000ZAnshadhttps://terminalblog.com/blog/claude-code-gemini-cli-prompt-injection-steals-ci-secrets/<![CDATA[Your GitHub Issue Just Stole Your CI Secrets — The Prompt Injection Attack Nobody Saw Coming]]>2026-08-14T10:00:00.000Z2026-08-14T10:00:00.000ZAnshad