AINewsnow

Claude Code ecosystem grows as security flaw found in malicious extension

Security researchers found a backdoored Claude Code extension on the Cursor VS Code Marketplace, while new tools emerged for running Claude Code, Codex and Gemini CLI together on shared repositories.

Read the full story at Microsoft Research Blog ↗

Timeline · 36 reports

  1. 2026-11-02 09:21 · DEV Community — AI
    PingCode AI - Unified API for Claude Code, Codex & More
  2. 2026-11-02 08:38 · DEV Community — AI
    How I run many Claude Code and Codex agents at once with a Chief that assigns the work
  3. 2026-11-01 20:01 · DEV Community — AI
    Let Claude Code or Cursor debug your page in a real Chrome browser
  4. 2026-11-01 19:47 · DEV Community — AI
    Make Claude Code design, plan and test before it writes code
  5. 2026-11-01 16:01 · DEV Community — AI
    Cloned a Stranger's Repo? Check 6 Agent Config Files Before Claude Code or Codex Opens It
  6. 2026-11-01 15:52 · DEV Community — AI
    Coincide: Claude Code, Codex, Cursor and more, side by side on your Mac
  7. 2026-11-01 14:22 · DEV Community — AI
    Using Claude Code, Codex and Gemini CLI on the same repository
  8. 2026-11-01 13:48 · DEV Community — AI
    Malicious Claude Code Extensions in the Wild: Why AI Agents Need Deterministic Outbound Gates
  9. 2026-11-01 12:10 · DEV Community — AI
    Claude Code vs Codex: How I Use Both on One Repo
  10. 2026-11-01 10:54 · DEV Community — AI
    I gave Claude Code a crew. Codex and Gemini found a race in the plugin that runs them.
  11. 2026-11-01 07:05 · DEV Community — AI
    How to stop Claude Code, Cursor and Codex reading your .env file
  12. 2026-10-31 23:43 · DEV Community — AI
    "Buddy: let Claude Code, Codex and other AI agents use your Android phone
  13. 2026-10-31 23:27 · DEV Community — AI
    How to install and use agent skills in Claude Code, Cursor and Codex (with a free plugin marketplace)
  14. 2026-10-31 21:00 · DEV Community — AI
    I Let Claude Code Write a 20-Lesson Tutorial Course for My App From Its Codebase
  15. 2026-10-31 19:02 · DEV Community — AI
    Stop Claude Code from building the same generic landing page
  16. 2026-10-31 18:30 · DEV Community — AI
    A fake "official" Claude Code update planted SSH backdoors through Cursor's marketplace
  17. 2026-10-31 15:10 · DEV Community — AI
    How to Stop Claude Code From Reading Your .env File (Deny Rules Aren't Enough)
  18. 2026-10-31 14:01 · DEV Community — AI
    Your AI coding transcripts are a secret store: where Claude Code, Codex, Cursor, Copilot and Antigravity keep them
  19. 2026-10-31 13:20 · DEV Community — AI
    Claude Code Extension Backdoor in Cursor: Uninstalling Won't Remove the SSH Key
  20. 2026-10-31 11:30 · DEV Community — AI
    How to Tell What Claude Code and Codex Forget When They Compact a Session
  21. 2026-10-31 11:27 · The Next Web
    Anthropic denies breach as tampered Claude Code extension hits Cursor users
  22. 2026-10-31 09:38 · DEV Community — AI
    A trojanized Claude Code extension reached the Cursor Marketplace too — here's a 7-point audit for your machine
  23. 2026-10-31 08:15 · DEV Community — AI
    Claude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up
  24. 2026-10-31 08:02 · DEV Community — AI
    Two Claude Code sessions, one folder, no merge conflicts: how I split a hackathon build between AI agents
  25. 2026-10-31 07:49 · DEV Community — AI
    I'm 15, and I built an interactive vision simulator using Claude code, vanilla JS and CSS filters
  26. 2026-10-31 05:00 · Techmeme
    Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish
  27. 2026-10-31 01:02 · Microsoft Research Blog
    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
  28. 2026-10-31 01:01 · DEV Community — AI
    Make Claude Code build a landing page with real art direction
  29. 2026-10-30 21:09 · Ars Technica AI
    Anthropic VS code extension on Cursor backdoored for nearly 12 hours
  30. 2026-10-30 18:16 · The Decoder
    Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
  31. 2026-10-30 17:29 · Fast Company AI
    Hackers hijacked a Claude Code extension, exposing yet another new AI security risk
  32. 2026-10-30 16:27 · The Register AI/ML
    Anthropic: That Claude Code extension compromise… couldn't be us
  33. 2026-10-30 14:36 · BleepingComputer
    Malicious Claude Code extension on Cursor planted SSH backdoors
  34. 2026-10-30 12:59 · r/ClaudeAI
    A backdoored Claude Code extension hit up to 5,000 Cursor users
  35. 2026-10-30 11:18 · r/LocalLLaMA
    Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
  36. 2026-10-30 11:00 · Towards Data Science
    Claude Code Mods: Custom Hooks to Fix My Biggest AI Coding Frustrations

More stories

  1. API-Schlüssel im Browser offengelegt? Prüfen Sie Ihren OpenAI-, Claude- oder Gemini-Schlüssel in 2 Minuten — DEV Community — AI
  2. AI coding agent governance for small engineering teams: a one-page operating model — DEV Community — AI
  3. Use your Claude, ChatGPT or Gemini subscription in goose, no API key — DEV Community — AI
  4. Super easy onboarding for 12 coding agent CLIs, with your past chats imported — DEV Community — AI
  5. Major AI chatbots ChatGPT, Claude, and Gemini hit by simultaneous outages — Mashable AI
  6. I like Gemini's stupidity. — r/GeminiAI
  7. What we got wrong building an MCP server for AI visibility data — DEV Community — AI
  8. ChatGPT vs Gemini vs Claude: Pick by the Job, Not by the Hype — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →