A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

Cursor reported on October 29, 2026 that a maliciously modified build of the Claude Code extension, Anthropic.claude-code 2.1.313, was available in its extension marketplace and tries to install a ...

A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development ...

For approximately 11 hours on October 29 (Pacific Time), a tampered version of the official Anthropic Claude Code extension (ID `anthropic.claude-code`, v2.1.312/2.1.313) containing a malicious loader ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

Hello, this is DreamTact DX Solutions.One week after the emergency PHP update, a critical vulnerability has been discovered in 'Brotli,' a data compression mechanism created by Google.You might think, ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...