Hello, this is atom.On October 29, 2026, an incident occurred where a tampered Claude Code extension was distributed on the ...

How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...

Tampered copies of Anthropic’s Claude Code extension reached Cursor users through its marketplace, potentially exposing up to ...

Developers installing Claude Code through Cursor’s extension marketplace were offered tampered packages designed to collect information about their computers and give attackers remote access. Cursor ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious Claude Code extension on Cursor exposed up to 5,000 developers to SSH backdoors. Here's what happened and what ...

The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...

Principal propagation does not feature in the design of which extensions preserve core system authorization and audit trails’ ...