Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...
A booby-trapped version of the Claude Code extension was served to Cursor users for about 11 hours on October 29.
Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...
A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
Installés sur les postes des développeurs avec leurs droits, leurs jetons et un accès au réseau, les agents de code sont ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
Cursor reported on October 29, 2026 that a maliciously modified build of the Claude Code extension, Anthropic.claude-code 2.1.313, was available in its extension marketplace and tries to install a ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...