A tampered copy of Anthropic's Claude Code extension sat in Cursor's marketplace for about 11 hours on 29 October, reach...

A tampered copy of Anthropic's Claude Code extension sat in Cursor's marketplace for about 11 hours on 29 October, reaching up to 5,000 users. It tried to plant an SSH key and open a reverse tunnel to the attacker's server, harvesting hostnames, Git emails and the names of up to 40 secret-holding environment variables. Cursor pulled the extensions and rotated its keys. https://thenextweb.com/news/tampered-claude-code-extension-cursor-ssh-backdoor #Tech #Startup #News #AI