A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

VS Code 1.145 brings remote agent previews, Claude and Codex support in nested sessions, custom automation schedules, and ...

Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s ...

A fake update was delivered under the official nameFrom the evening of October 29th to the following morning, a tampered ...

Researchers say developers using Visual Studio Code (VS Code) with Claude AI may have been exposed to a serious security ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

The official Claude Code extension on the Cursor development environment’s marketplace contained an SSH backdoor.

VS Code model picker now allows users to switch between Anthropic and Copilot providers between turns reconfiguring the agent host. Microsoft has released Visual Studio Code 1.133, an update to its ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...