Cursor distributed a trojanized Anthropic Claude Code VS Code extension through its marketplace, and the malicious ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Version 1.104.4 of Tailscale closes a set of flaws in the company’s built-in SSH server, the most serious of which let a ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those machines the attacker could not have logged in through the tunnel. The company ...

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...

A compromised Claude extension in Cursor exposed up to 5,000 developer systems to a supply-chain attack lasting nearly 12 ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

Tailscale 1.104.4 fixes SSH forwarding flaws that could expose root-only sockets, while related issues remain unpatched in ...

On October 29, it was discovered that version '2.1.313' of what claimed to be the Claude Code VS Code extension contained ...