Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

A trojanized build of Anthropic's official Claude Code VS Code extension sat in Cursor's marketplace for most of October 29, exposing up to ...

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

Security researchers have discovered that the Claude Code VS Code extension by Anthropic was maliciously tampered with, and ...

Attackers backdoored the official Claude Code VS Code extension, being distributed on the Cursor Marketplace, designed to ...