A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
Tampered copies of Anthropic’s Claude Code extension reached Cursor users through its marketplace, potentially exposing up to ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...
A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
The motivation behind thisI had been running Strata, which powers Qwen3.8 Flash Next, on two of my home-built PCs and using ...
When developers ask AI to perform tasks, a screen sometimes appears to confirm what is allowed to be executed.Whether to modify files. Whether to run commands. Whether to connect to external services.
Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...