On October 29, 2026, the AI code editor Cursor announced that version 2.1.313 of the "Anthropic.claude-code" extension, ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls ...
A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
A tampered version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for over 11 hours ...
I installed the optional Windows 11 update KB5127936 (build 26300.9818) in a VM and compared before and after: context menu, ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...
Privileged access management decides who can touch your domain controllers, cloud consoles and production databases, and the ...
Good enough to trust, not good enough to forget.
A tampered Claude Code extension in Cursor's marketplace tried to plant an SSH backdoor on up to 5,000 PCs. Here is what it ...