The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.
Morning Overview on MSN
Polymarket halted trading after hackers planted crypto-draining code, with $2.5 million traced so far
Polymarket paused trading on October 29 after attackers slipped crypto-draining JavaScript onto its site through a compromised outside provider. BleepingComputer traced about $2.5 million in assets to ...
City of Dubuque officials said they have directed the manager of Five Flags Center to remove a tarp covering an exterior mural ahead of a planned presidential visit.
DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...
Principal propagation does not feature in the design of which extensions preserve core system authorization and audit trails’ ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...
According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results