Search
Cursor's VS Code extension marketplace recently hosted a maliciously tampered, unofficial build of Anthropic.claude-code version 2.1.313, affecting up to 5,000 users. The compromised extension harvests host information and attempts to write the attacker's SSH public key, enable the local SSH service, establish a reverse tunnel, and plant persistence scripts on both macOS and Windows. On most hosts, permission restrictions prevent the SSH service from being enabled, making it difficult for the attacker to log in through the tunnel—but key injection, persistence, and host information exfiltration still occur. The attacker's server is currently offline, the affected version has been removed, and Cursor has shut down and rebuilt the extension marketplace and rotated its keys. There is no evidence that other versions are affected.
-
C114 Communication Network -
Communication Home
