A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...
Cryptopolitan on MSN
Cursor marketplace backdoor tests trust in AI coding assistants
Cursor removed a compromised Claude Code extension from its marketplace on October 29. This came after researchers found out ...
Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...
Oct 30 (Reuters) - Cursor, the coding-tool company owned by SpaceX, said on Friday that a maliciously modified version of ...
Attackers backdoored the official Claude Code VS Code extension, being distributed on the Cursor Marketplace, designed to ...
OpenSourceMalware says a Claude Code extension artifact on Open VSX, version 2.1.313, added an attacker SSH key, opened a ...
According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results