A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
A fake update was delivered under the official nameFrom the evening of October 29th to the following morning, a tampered ...
Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
Cursor reported on October 29, 2026 that a maliciously modified build of the Claude Code extension, Anthropic.claude-code 2.1.313, was available in its extension marketplace and tries to install a ...
A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
For approximately 11 hours on October 29 (Pacific Time), a tampered version of the official Anthropic Claude Code extension (ID `anthropic.claude-code`, v2.1.312/2.1.313) containing a malicious loader ...
Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development ...
Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results