Trojanized Claude Code Extension via Cursor Marketplace Backdoored Thousands of Devs
emmanuelvivier · x · 2026-10-31
A trojanized Claude Code extension distributed through the Cursor marketplace exposed thousands of developers: the malicious version installed a persistent SSH backdoor—a supply-chain attack highlighting the audit risks of the fast-growing AI coding plugin ecosystem.
More from coding & agent
- Pass/Fail Beats 1-5 Ratings for Agent Regression Tests, Argues Practitioner — intellectronica · 2026-10-31
- Cursor confirms both extension versions 2.1.312 and 2.1.313 contained malicious payload — cyb3rops · 2026-10-31
- Dev ditches the code pane: running two parallel Claude Code sessions beats editor + assistant — 4310sy · 2026-10-31
- Claude Opus drives Blender MCP to build 3D models straight from 3DGS — janusch_patas · 2026-10-31
- Hot-swapping 18GB models RAM↔VRAM on one 24GB GPU: 1.5s physics vs 29s llama.cpp reality — bjivanovich · 2026-10-31
- Team wires MCP-connected AI agents to auto-reject ~98% of job applications — AnuranBuilds · 2026-10-31