trae

According to reports from Intelligent Emergence, ByteDance has completed the team integration of its office AI products, with the TRAE and Coze teams being fully merged into the Doubao system. Among them, TRAE Work and Coze will integrate their product capabilities in work scenarios with Doubao, while TRAE IDE and CLI will continue to develop as a programming product line under the Doubao brand. After the adjustment, the relevant product and operations teams will report to Zhao Qi, the product head of Doubao.TRAE and Coze were originally part of ByteDance's Product R&D and Engineering Architecture Department, positioned respectively as AI programming products and AI intelligent entity development platforms. Starting this year, productivity agents have become an important strategic direction for Doubao, and the experience accumulated by both parties will be reused in Doubao. Following this adjustment, ByteDance has further clarified the AI core business positioning of Doubao, focusing AI office products on Doubao, and will launch the independent AI office product "Doubao Work" as a unified product and brand for AI office scenarios as early as this week.ByteDance responded that the adjustment aims to better coordinate product and technical resources to provide users with a higher quality AI work experience, and existing user rights will not be affected. Recently, Doubao has intensively updated office functions such as remote computer control, Windows virtual desktop, cloud computer, and side workbench, and has launched over 200 skills and connectors; the independent "Doubao Work" will also be deeply integrated with Feishu, with the former Feishu "Aily Intelligent Partner" having been renamed to "Doubao Work Partner."

According to the security agency Slow Fog, the malicious TRAE IDE extension juannegro.solidity disguises itself as a Solidity plugin and acts as a cross-platform malware delivery mechanism. This extension automatically executes and establishes persistence after the IDE starts, and it also uses Ethereum smart contracts to store and retrieve dynamic C2 configurations, allowing attackers to update C2 endpoints and payloads without needing to re-release the extension.Although the extension has been removed from Open VSX, it was still available through the TRAE marketplace as of July 18. Users who have installed it should immediately delete it and check their systems for compromise.