The Hacker News

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Is it dangerous to open Claude Code in the Downloads folder? I gave up on a total ban after 3 days

Are you using Claude Code or Codex without any security measures?Recently, I've been seeing warnings like this here and there ...

3 Reasons Why "Supposedly Blocked Operations" Slip Through in Claude Code on Windows, and a Complete Set of Hooks to Stop Both Bash and PowerShell

This article is for those who use Claude Code on Windows and believe they have "set up configurations to block" git push or ...
Gadget Review

Claude Code Just Started Refusing to Help Game Developers – Even on Legitimate Projects

Claude Code's Opus 5.5 game-cloning safeguard is blocking legitimate developer work like reverse engineering and debugging, ...
SecurityWeek

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...