Backdoor Found in 'Claude Code' Extension on Cursor Marketplace
A malicious version of the 'Claude Code' extension on the Cursor IDE marketplace installed a persistent SSH backdoor on developer machines.
A malicious version of the 'Claude Code' extension on the Cursor IDE marketplace installed a persistent SSH backdoor on developer machines.
A new Mandiant report details how an attacker hijacked an AI coding assistant to spread a worm across repositories, highlighting a new supply chain risk.