A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by planting an SSH key, opening a reverse tunnel, and installing startup scripts.

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to ...

Visual Studio Code Remote Development allows you to transparently interact with source code and runtime environments sitting on other machines (whether virtual or physical). GitHub Codespaces is a ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...

Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was distributed on its own VS Code extension marketplace. This version was not developed ...

I tasked GPT-6 Luna Max with the same floating garden challenge and compared the Codex app version with the VS Code version. The model and effort were identical. The difference was the working ...

The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used ...

A trojanized build of Anthropic's official Claude Code VS Code extension sat in Cursor's marketplace for most of October 29, exposing up to ...