According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those machines the attacker could not have logged in through the tunnel. The company ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...