AINewsnow

How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store

On October 29, Cursor's extension marketplace served tampered builds of Anthropic's Claude Code extension, versions 2.1.312 and 2.1.313. They were live for about 11 hours. They added an attacker's SSH key to developers' machines. Anthropic's systems were not breached. The official package was not b…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-02 05:32 · DEV Community — AI
    How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store

More stories

  1. Claude Code ecosystem expands as multi-agent workflows and security concerns grow — Microsoft Research Blog
  2. How do you sandbox your AI coding agent? Looking to compare setups — r/AI_Agents
  3. Best AI API gateway for coding agents 2026 cheap: which one holds up when your agent runs subagents in parallel? — DEV Community — AI
  4. Will AI replace developers? What actually changes — DEV Community — AI
  5. Building a read-only MCP server where a connector token can never become a login — DEV Community — AI
  6. The Cursor rule people actually save is tiny — not your 900-skill ZIP — DEV Community — AI
  7. How I manage MCP access, approvals, and tool history with GateRook — DEV Community — AI
  8. Eliminating AI Coding Loops: Deterministic Flight Recording & Polyglot Blast-Radius with genesis-blackbox v0.2.0 — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →