A tampered version of the official Claude Code extension was briefly distributed through Cursor's own marketplace with an SSH ...

A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to ...

On October 29, 2026, the AI code editor Cursor announced that version 2.1.313 of the "Anthropic.claude-code" extension, ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

A tampered version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for over 11 hours ...

A tampered Claude Code extension in Cursor's marketplace tried to plant an SSH backdoor on up to 5,000 PCs. Here is what it ...

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls ...

A cryptocurrency mining campaign has resurfaced on Hugging Face shortly after its earlier accounts were removed, using fake ...

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...

Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development ...