Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...
A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...
A malicious extension on Cursor's marketplace attempted to give hackers persistent access to developers' computers, raising ...
An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...
A trojanized build of Anthropic's official Claude Code VS Code extension sat in Cursor's marketplace for most of October 29, exposing up to ...
Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
Security researchers have discovered that the Claude Code VS Code extension by Anthropic was maliciously tampered with, and ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still ...