A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
A trojanized build of Anthropic's official Claude Code VS Code extension sat in Cursor's marketplace for most of October 29, exposing up to ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
Morning Overview on MSN
A skimming gang hid in a marketing script to lift card numbers at checkout
A Brazilian Magecart card-skimming group planted a payment stealer inside an analytics and marketing script that Convertr ...
News9Live on MSN
Claude Code extension hacked: SSH backdoor puts 5,000 Cursor users potentially at risk
A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
Software supply chain attacks are a practical risk for any organisation that builds, buys, or runs software. The issue is not limited to open source packages. It also includes source control, build ...
According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those machines the attacker could not have logged in through the tunnel. The company ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...
Cursor says a modified Claude Code 2.1.313 was on its marketplace for about 11 hours, reaching at most 5,000 users. The SSH ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results