How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...
Developers installing Claude Code through Cursor’s extension marketplace were offered tampered packages designed to collect information about their computers and give attackers remote access. Cursor ...
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
Introduction: What You Can Determine from This ArticleAs you use AI coding tools, the number of extensions you add to your ...
A fake update was delivered under the official nameFrom the evening of October 29th to the following morning, a tampered ...
Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...
Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
The official Claude Code extension on the Cursor development environment’s marketplace contained an SSH backdoor.
A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...
Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s ...
A tampered Claude Code extension in Cursor's marketplace tried to plant an SSH backdoor on up to 5,000 PCs. Here is what it ...