NewsDark Reading
Devs Hit by Trojanized Claude Code Extension for Cursor
Teaser from the source
Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on Trojanized
Other advisories
- Criticalpwn_watch:claude-code-vscode-extension-ssh-backdoor-oct-2026Trojanized Claude Code VS Code extension (Anthropic.claude-code 2.1.312 and 2.1.313) in Cursor's extension marketplace planted an SSH backdoor on up to 5,000 machines
- Not ratedosv:GHSA-93qj-5q5v-3c2hTrojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
- Criticalghsa:GHSA-93qj-5q5v-3c2hTrojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
- HighCVE-2023-290593CX DesktopApp supply-chain attack (trojanized signed builds)
Other news entries
- Fake-download campaign uses trojanized installers to deliver monetization payloadsNewsMicrosoft Threat Intelligence
- Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorNewsThe Hacker News
- Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized CopiesNewsSecurityWeek
- New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web TrafficNewsThe Hacker News
- Counterfeit installers turn routine software downloads into enterprise breachesNewsCSO Online
- 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2NewsThe Hacker News
- Sandworm hackers target IT pros with trojanized WireGuard VPN clientNewsBleepingComputer
- Trojanized AI skills gain 1.7M installs in agent-targeted attackNewsCSO Online
Source: https://www.darkreading.com/cyberattacks-data-breaches/devs-trojanized-claude-code-extension-cursor
ID