A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A malicious version of Anthropic's Claude Code extension for VS Code and Cursor was distributed through official marketplaces ...

The official Claude Code extension on the Cursor development environment’s marketplace contained an SSH backdoor.

A malicious Claude Code extension on Open VSX carried a hidden backdoor, putting developers' machines at risk.

Today we identified a security incident involving a specific extension package in the Cursor VS Code extension Marketplace: Anthropic.claude-code version 2.1.313.

Researchers say developers using Visual Studio Code (VS Code) with Claude AI may have been exposed to a serious security ...

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those machines the attacker could not have logged in through the tunnel. The company ...