A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious Claude Code extension on Cursor exposed up to 5,000 developers to SSH backdoors. Here's what happened and what ...

The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used ...

A Brazilian Magecart group has compromised the checkout infrastructure of ecommerce platform Convertr, injecting a malicious ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...

In July 2025, Veracode started releasing its GenAI Code Security Report, which analyzed code generated by LLMs for ...

A malicious extension on Cursor's marketplace attempted to give hackers persistent access to developers' computers, raising ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...