A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
Visual Studio Code Remote Development allows you to transparently interact with source code and runtime environments sitting on other machines (whether virtual or physical). GitHub Codespaces is a ...
How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...
A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
Security researchers have discovered that the Claude Code VS Code extension by Anthropic was maliciously tampered with, and ...
Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used ...