Malware back door found in Claude Code official Cursor extension

A supply chain attack reportedly planted malware in the official Claude Code extension for Cursor, targeting developers using AI coding tools.

Read the full story at Pivot to AI ↗

Timeline · 1 report

2026-11-02 22:53 · Pivot to AI
Claude Code official Cursor extension gets malware back door

More stories

Malicious Claude Code extension in Cursor marketplace attempted SSH backdoor — Microsoft Research Blog
Fine-tuning a 322M Model for Coding Agent Safety: What 3 Runs and 2 Failures Taught Me — DEV Community — AI
I moved my MCP servers from Claude to Codex. Here's the cheat sheet — DEV Community — AI
Giving AI agents hands without handing over the keys: how we think about safety at TwinMCP — DEV Community — AI
Lovable or Cursor? The Real Difference Between AI App Builders and AI Coding Tools — DEV Community — AI
Which Cursor model is best for everyday work? — DEV Community — AI
Why the Model Context Protocol (MCP) Is Changing How We Connect AI Frameworks — DEV Community — AI
Building a read-only MCP server where a connector token can never become a login — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →