ChipokiaTech news, without the noise
← All stories

Tampered Claude Code extension in Cursor planted an SSH backdoor

A tampered build of Anthropic's Claude Code extension was available in Cursor's extension marketplace on October 29. It adds an attacker's SSH key, sends system details to a remote server and sets up a startup item. Updating to version 2.1.314 does not remove…

Preview courtesy of Notebookcheck. The full article opens on their site.

Other coverage of this story

More from Notebookcheck