A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

Cursor has disclosed malicious versions of the Anthropic.claude-code extension in its VS Code Extension Marketplace that ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A tampered version of the official Claude Code extension was briefly distributed through Cursor's own marketplace with an SSH ...

Microsoft Edge exploit chain combines five bugs and two Windows features to bypass the browser sandbox and execute code .

Claude Opus 5.5 code security tied GPT-6-Sol at 73% in Veracode’s fall evaluation, raising the benchmark ceiling while ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

A trojanized build of Anthropic's official Claude Code VS Code extension sat in Cursor's marketplace for most of October 29, exposing up to ...