A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s ...

A fake update was delivered under the official nameFrom the evening of October 29th to the following morning, a tampered ...

Introduction: What You Can Determine from This ArticleAs you use AI coding tools, the number of extensions you add to your ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious version of Anthropic's Claude Code extension for VS Code and Cursor was distributed through official marketplaces ...

A malicious Claude Code extension on Open VSX carried a hidden backdoor, putting developers' machines at risk.