Cursor has disclosed malicious versions of the Anthropic.claude-code extension in its VS Code Extension Marketplace that ...
A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results