A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A fake update was delivered under the official nameFrom the evening of October 29th to the following morning, a tampered ...

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...

Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious version of Anthropic's Claude Code extension for VS Code and Cursor was distributed through official marketplaces ...

A malicious Claude Code extension on Open VSX carried a hidden backdoor, putting developers' machines at risk.

For approximately 11 hours on October 29 (Pacific Time), a tampered version of the official Anthropic Claude Code extension (ID `anthropic.claude-code`, v2.1.312/2.1.313) containing a malicious loader ...