A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious Claude Code extension on Cursor exposed up to 5,000 developers to SSH backdoors. Here's what happened and what ...

A Brazilian Magecart group has compromised the checkout infrastructure of ecommerce platform Convertr, injecting a malicious ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...

In July 2025, Veracode started releasing its GenAI Code Security Report, which analyzed code generated by LLMs for ...

A malicious extension on Cursor's marketplace attempted to give hackers persistent access to developers' computers, raising ...

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

Prediction market platform Polymarket temporarily suspended trading operations after hackers compromised a third-party ...