NewsSophos X-Ops
Malicious Claude Code extension distributed through Cursor marketplace
Teaser from the source
Categories: Threat Research Tags: advisory, Cursor
This is the RSS-feed teaser. Read the full article at the original source.
Read at Sophos X-OpsMore on distributed
Other advisories
- HighCVE-2026-116591Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.4 release
- Not ratedosv:CLEANSTART-2024-UU10832issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2
- Not ratedosv:CLEANSTART-2026-MQ69584vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust
- Not ratedosv:CLEANSTART-2026-IO06062etcd is a distributed key-value store for the data of a distributed system
- Not ratedosv:CLEANSTART-2026-HL19254etcd is a distributed key-value store for the data of a distributed system
- Not ratedosv:CVE-2026-117504a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of service
- Not ratedosv:CLEANSTART-2026-MP84668etcd is a distributed key-value store for the data of a distributed system
- Not ratedosv:CLEANSTART-2026-FO24538etcd is a distributed key-value store for the data of a distributed system
Other news entries
- Hackers backdoor Linux servers using trojanized CWP web serverNewsBleepingComputer
- Cursor removes malicious Claude Code extension after SSH backdoor attemptNewsCSO Online
- Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%NewsThe Hacker News
- Malicious Claude Code extension on Cursor planted SSH backdoorsNewsBleepingComputer
- Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorNewsThe Hacker News
- "Icepick" leak exposes records on 41,000 DHS employees, including undercover ICE agentsBreachpwn.watch
- LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and BackdoorNewsThe Hacker News
- Rank Math PRO WordPress Plugin Compromised in Supply Chain AttackNewsSecurityWeek
ID