A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
XDA Developers on MSN
Flipper's Busy Bar finally runs your own JavaScript apps, and they no longer need a computer to work
The Busy Bar can run JavaScript apps now, and an app catalog is just around the corner.
How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...
News9Live on MSN
Claude Code extension hacked: SSH backdoor puts 5,000 Cursor users potentially at risk
A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.
Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was ...
Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
Cursor says a modified Claude Code 2.1.313 was on its marketplace for about 11 hours, reaching at most 5,000 users. The SSH ...
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results