A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s ...
According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...
An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...
A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...
News has been circulating that "the Claude Code extension contained a backdoor." Since it's a tool I use every day, I think ...
It has been reported that version 2.1.313 of the official "Claude Code for VS Code" extension contained code that installed ...
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
Oct 30 (Reuters) - Cursor, the coding-tool company owned by SpaceX, said on Friday that a maliciously modified version of ...
Update May 21: GitHub has now linked this breach to the TanStack npm supply-chain attack and says the employee installed a malicious version of the Nx Console extension. GitHub has confirmed that ...