A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...
Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...
The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
Cryptopolitan on MSN
Cursor marketplace backdoor tests trust in AI coding assistants
Cursor removed a compromised Claude Code extension from its marketplace on October 29. This came after researchers found out ...
A trojanized build of Anthropic's official Claude Code VS Code extension sat in Cursor's marketplace for most of October 29, exposing up to ...
Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results