A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
Introduction: What You Can Determine from This ArticleAs you use AI coding tools, the number of extensions you add to your ...
Clone a stranger's repository and open it in Cursor on Windows. That is the entire exploit. If the repository contains a file named git.exe at its root, the AI IDE runs it immediately — no click, no ...
Cursor urges cleanup and credential rotation after malicious Claude Code marketplace packages; uninstalling may leave ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
A new report out today from artificial intelligence security startup Cyata Security Ltd. details a critical remote code execution vulnerability in Cursor Inc.’s integrated development environment that ...
A tampered version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for over 11 hours ...