Living off the coding agent: Two tales of tunnels and LaunchAgents

<p>Coding agents such as Claude Code and Cursor are vendor-signed, used all day on developer laptops, and routinely open shells, call APIs, edit files, and install helpers. That makes GenAI-adjacent alerts challenging to investigate. The parent looks trusted, while the children can still look a lot like classic high-severity activity.</p> <p>This article walks through one of those windows. On a ma