A booby-trapped version of the Claude Code extension was served to Cursor users for about 11 hours on October 29.

A tampered Claude Code extension in Cursor's marketplace installed an SSH backdoor on up to 5,000 developers' machines. Here ...

A malicious version of Anthropic's Claude Code extension was distributed through the Cursor extension marketplace, ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

Summary by AIModel used: gpt sol 6.1In October 2026, a critical vulnerability in Linux kernel TCP processing, 'CVE-2026-98432 ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A tampered version of the official Claude Code extension was briefly distributed through Cursor's own marketplace with an SSH ...

Amazon Linux 2 and Amazon Linux 2023 kernel packages for the resolution of CVE-2026-98432 are available. Customers should update their kernel packages and reboot. Kernel versions kernel-4.14, kernel-5 ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

Last week brought us at least two broken embargoes: php2shell leaked onto Hacker News a day early, and a batch of Linux kernel bugs landed on the public kernel mailing list instead of the private ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...