NewsSecurityWeek
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
Teaser from the source
The extension performed host reconnaissance and attempted to create a reverse SSH tunnel. The post Malicious Claude Code Extension Served in Cursor Supply Chain Attack appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Malicious
Other advisories
- Highosv:MAL-2026-18657Malicious code in strands-aidr (PyPI)
- Highosv:MAL-2026-18651Malicious code in @secauditb20y/sec-test-b1 (npm)
- Highosv:MAL-2026-18650Malicious code in @secaudita10x/sec-test-a1 (npm)
- Highosv:MAL-2026-18656Malicious code in thththtbhthhth (npm)
- Highosv:MAL-2026-18649Malicious code in @saidddddddddd/ggsgg (npm)
- Highosv:MAL-2026-18654Malicious code in heheheshsds (npm)
- Highosv:MAL-2026-18652Malicious code in doghack-afterglow (npm)
- Highosv:MAL-2026-18653Malicious code in dogmans-afterglow (npm)
Other news entries
- The Sandbox Fights Back: Joe Security Launches Adaptive DetonationNewsCSO Online
- Attackers turned OpsShield’s trusted update channel into a supply-chain attackNewsCSO Online
- Google Calendar phishing campaign hijacks sessions, bypasses MFANewsBleepingComputer
- Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's MemoryNewsThe Hacker News
- Malicious cPGuard Updates Served in OpsShield Supply Chain AttackNewsSecurityWeek
- cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password HashesNewsThe Hacker News
- Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into ProxiesNewsKrebs on Security
- Cursor removes malicious Claude Code extension after SSH backdoor attemptNewsCSO Online
Source: https://www.securityweek.com/malicious-claude-code-extension-served-in-cursor-supply-chain-attack/
ID