Google Antigravity — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
November 27, 2025
Last Seen
July 10, 2026

Google Antigravity is a technology platform tracked across 3 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed November 27, 2025; most recent activity July 10, 2026.

Overview

Google Antigravity is a Google-backed AI-enabled development platform comprising multiple IDE variants (including Google Antigravity IDEs) with an extensible plugin ecosystem. Its significance in cybersecurity stems from observed abuse within its ecosystem—malicious extensions promoted to developers and rapid post-launch compromises of its AI coding tool—highlighting supply-chain, extension, and onboarding risks in AI-assisted development environments.

Related Threat Clusters

  • GhostApproval Vulnerability Exposes AI Coding Assistants to Remote Code Execution

    A vulnerability named GhostApproval has been discovered in six major AI coding assistants, including Amazon Q Developer, Anthropic Claude Code, Augment, Cursor, Google Antigravity, and Windsurf. This flaw allows…

    17 articles · Updated July 8, 2026
  • Google's Antigravity AI Tool Hacked Day After Launch

    A security researcher identified a significant flaw in Google's newly launched Antigravity AI coding tool just one day after its release. This incident exemplifies the trend of companies rapidly deploying AI tools that…

    2 articles · Updated November 27, 2025
  • Malicious App Extensions Recommended by Popular AI IDEs

    A security flaw in AI-powered development environments Cursor, Windsurf, and Google Antigravity has exposed millions of developers to potential malware. These IDEs, which have over a million users combined, were found…

    2 articles · Updated January 6, 2026

Recent Intelligence Reports

  • GhostApproval — www.wiz.io · July 10, 2026
  • Vulnerability in coding agents: access to arbitrary files via symlinks — Heise.De · July 9, 2026
  • New GhostApproval Vulnerability Affects Amazon Q, Claude Code, Cursor, and Other AI Agents — Cybersecuritynews · July 9, 2026
  • Cursor, Windsurf & Google Antigravity IDEs Recommend Malicious App Extension to Developers — Cybersecuritynews · January 6, 2026
  • Google's hot new AI coding tool was hacked a day after launch — Forbes.Au · November 27, 2025

CVSS v3.1 Breakdown