A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
The motivation behind thisI had been running Strata, which powers Qwen3.8 Flash Next, on two of my home-built PCs and using ...
GitHub's annual Octoverse 2026 report shows agents initiating about 40% of pull requests. It also shows how 7.4 billion ...
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...