A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
Introduction: What You Can Determine from This ArticleAs you use AI coding tools, the number of extensions you add to your ...
Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was ...
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
Cursor detected a tampered version of Anthropic's Claude Code extension, risking user data and remote access.
Cursor urged developers who installed malicious Claude Code packages from Cursor's marketplace to clean affected machines.
A malicious version of Anthropic's Claude Code extension was listed on the Cursor marketplace for more than 11 hours, ...
Clone a stranger's repository and open it in Cursor on Windows. That is the entire exploit. If the repository contains a file named git.exe at its root, the AI IDE runs it immediately — no click, no ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results