A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

Cursor removed a compromised Claude Code extension from its marketplace on October 29. This came after researchers found out ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Cursor says a modified Claude Code 2.1.313 was on its marketplace for about 11 hours, reaching at most 5,000 users. The SSH ...

Multiple vulnerabilities in five popular AI developer tools could allow attackers to execute code on a host machine, read and ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...

Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development ...