AINewsnow

Claude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up

Security firm Phorion published an advisory on October 30, 2026 saying that release 2.1.313 of Claude Code for VS Code, as served through the Cursor Marketplace, carried a hidden backdoor. Cursor has pulled the release, and the advisory says the NPM and VS Code versions of 2.1.313 were pulled too.…

Read the full story at DEV Community — AI ↗

Timeline · 2 reports

  1. 2026-11-01 12:10 · DEV Community — AI
    Claude Code vs Codex: How I Use Both on One Repo
  2. 2026-10-31 08:15 · DEV Community — AI
    Claude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up

More stories

  1. Claude Code and Codex ecosystem grows as malicious Cursor extension is pulled — Microsoft Research Blog
  2. Google, OpenAI, Microsoft and Anthropic to honor shared robots.txt AI-training opt-out — Techmeme
  3. AI coding agent governance for small engineering teams: a one-page operating model — DEV Community — AI
  4. Which AI coding plans let buyers count what they get — DEV Community — AI
  5. A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits. — DEV Community — AI
  6. How does the Zoho Analytics MCP server work? Close to 20 tools, delete rows included, and a live gate test — DEV Community — AI
  7. Spec-Driven Development: Combining OpenSpec & Superpowers for Zero-Hallucination AI Coding — DEV Community — AI
  8. Building a read-only MCP server where a connector token can never become a login — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →