A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...
Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...
In July 2025, Veracode started releasing its GenAI Code Security Report, which analyzed code generated by LLMs for ...
A malicious extension on Cursor's marketplace attempted to give hackers persistent access to developers' computers, raising ...
A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
Prediction market platform Polymarket temporarily suspended trading operations after hackers compromised a third-party ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
Polymarket briefly halted trading after a compromised third-party script, which researchers tied to DebugBear, drained user ...
A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...
Software supply chain attacks are a practical risk for any organisation that builds, buys, or runs software. The issue is not limited to open source packages. It also includes source control, build ...
A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...