A trojanized version of the Claude Code extension, identified as anthropic.claude-code version 2.1.313, contains a malicious loader that enables persistent SSH access to developer systems. Researchers analyzed an artifact obtained from Open VSX and discovered 66 lines of JavaScript added to…
Microsoft has warned that malicious Claude Code extensions distributed through Cursor’s marketplace attempted to install a persistent SSH backdoor on developer workstations. Cursor disclosed the incident on October 29, 2026, reporting availability between approximately 2:27 AM and 1:35 PM PDT. Microsoft confirmed that its…
Published 30 Oct 2026, 23:19 UTC Trojanized Claude Code 2.1.313 distributed via Cursor and Open-VSX on Oct 29, 2026. It planted a persistent SSH backdoor on developer machines; at most 5,000 users affected. Anthropic pushed version 2.1.314 several hours after version 2.1.313 became available on Cursor, and the attackers…
Administrators who want to accelerate their automation skills can tap into the enhanced editing and debugging features of the Microsoft code editor. It's hard to leave behind a trusted tool in IT, but there are times when moving ahead requires…
If you run Cursor on macOS or Windows and it pulled the Claude Code extension (anthropic.claude-code) 2.1.312 or 2.1.313 on October 29, your machine may now have a stranger's SSH key in ~/.ssh/authorized_keys and a reverse SSH tunnel that restarts at login.
Cursor confirmed a tampered Claude Code 2.1.313 sat in its own marketplace for about 11 hours on October 29th, affecting at most 5,000 users. Records for Open VSX, Microsoft's marketplace and npm show no 2.1.313 release. By Ryan MerketPublished Oct 30th, 2026, 12:04am CTUpdated Oct 30th, 2026, 3:11pm CT The bad…
Notepad++ and VS Code do not format XML on their own: each needs a free extension, and then one shortcut does the job. xmllint and Python do it from a terminal or a script. Here are the menu paths, shortcuts…
Firebase Studio is sunsetting on March 22, 2027. As of June 22, 2026, new workspace creation and user signup are disabled. You can continue to work in and migrate your existing workspaces to Google AI Studio or Google Antigravity. Learn how to migrate. Any…
Not indicators on their own: ifconfig.me and api.ipify.org are legitimate public-IP services, and sandbox telemetry showed connections to ordinary Microsoft infrastructure; access alone does not indicate compromise. StepSecurity Enterprise customers can visit the Threat Center for the…
Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs). Anthropic's official Claude Code extension for the Cursor VS Code Marketplace was hijacked and swapped out for a malicious version with…
VS Code, Visual Studio, JetBrains IDEs, Neovim, Vim, Emacs, Zed and Xcode: releases, extensions, plugins and editor comparisons.
An article joins this feed when it matches these terms. Each one is also a search of its own.