A tampered Claude Code extension sat in Cursor's marketplace for about 11 hours. Here is the delivery chain that made it look like a normal update.
How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store
Related
Claude Code Output Validation Hooks in 2026: Linting Agent-Written Code Before It Touches Your Repo
Deterministic validation hooks for AI-generated code. Stop type errors, security holes, and test failures before Claude commits them to your repository.
My 12-Point Pre-Launch Checklist for n8n LLM Workflows. I Re-Ran 3 Old Failures and It Caught 21 of 21 Bad Runs
Over the last few weeks I've broken a lot of my own n8n AI workflows on purpose. A lead qualifier...
Grounding AI-written marketing posts in real weather data, without letting the model make things up
How a daily pipeline grounds LLM-written posts in NWS weather alerts: expiring signals, idempotent runs, a no-invent prompt rule and human approval.