A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...
Oct 30 (Reuters) - Cursor, the coding-tool company owned by SpaceX, said on Friday that a maliciously modified version of ...
Hello, this is atom.On October 29, 2026, an incident occurred where a tampered Claude Code extension was distributed on the ...
Table of Contents What happened? The issue is a modified version distributed via Cursor What was the extension trying to do?
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
A malicious extension on Cursor’s marketplace attempted to give hackers persistent access to developers’ computers, raising ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...