AINewsnow

A fake "official" Claude Code update planted SSH backdoors through Cursor's marketplace

For about 11 hours on 29 October, developers using Cursor with the Claude Code extension may have received an update that looked completely normal. It had the same extension ID, the same publisher and the next version number. It quietly tried to add an attacker's SSH key to their machine. What happ…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-31 18:30 · DEV Community — AI
    A fake "official" Claude Code update planted SSH backdoors through Cursor's marketplace

More stories

  1. Claude Code extension backdoor briefly distributed via Cursor's VS Code marketplace — Runway Research
  2. Human-in-the-loop AI coding: a developer decides what ships — DEV Community — AI
  3. Spec-Driven Development: Combining OpenSpec & Superpowers for Zero-Hallucination AI Coding — DEV Community — AI
  4. Why the Model Context Protocol (MCP) Is Changing How We Connect AI Frameworks — DEV Community — AI
  5. I moved my MCP servers from Claude to Codex. Here's the cheat sheet — DEV Community — AI
  6. A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits. — DEV Community — AI
  7. The Agent Had a Valid Key. It Deleted Production Anyway. — DEV Community — AI
  8. Building a Remote MCP Server to Handle Large Files (Audio/Video) — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →