News
Malicious Claude VS Code Extension Backdoored Through Anthropic Cursor Account
A malicious VS Code extension (v2.1.313) published via Anthropic’s official Cursor account targeted up to 5,000 developers, collected host details, attempted SSH key addition and reverse tunneling, and was removed after about 12 hours of exposure.