Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...
For approximately 11 hours on October 29 (Pacific Time), a tampered version of the official Anthropic Claude Code extension (ID `anthropic.claude-code`, v2.1.312/2.1.313) containing a malicious loader ...
Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...
The official Claude Code extension on the Cursor development environment’s marketplace contained an SSH backdoor.
A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...
Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s ...
A tampered Claude Code extension in Cursor's marketplace tried to plant an SSH backdoor on up to 5,000 PCs. Here is what it ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
A malicious version of Anthropic's Claude Code extension for VS Code and Cursor was distributed through official marketplaces ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...