Tampered Claude Code extension in Cursor marketplace planted SSH backdoor
Malicious builds of Anthropic’s AI coding extension were served to Cursor users for 11 hours, leaving attacker keys and persistence that outlast an uninstall. A tampered version of Anthropic’s Claude Code extension was served to developers through Cursor’s extension marketplace for about 11 hours on Oct. 29. It planted an attacker-controlled SSH key, a reverse […]
Continue Reading