AINewsnow

Security flaw found in Claude Code extension listed on Cursor's marketplace

A backdoored Claude Code extension was live in Cursor's VS Code extension marketplace for roughly eleven hours before removal, exposing supply-chain risk in coding-agent ecosystems.

Read the full story at Runway Research ↗

Timeline · 37 reports

  1. 2026-11-03 14:00 · SiliconANGLE AI
    Exclusive: Cogent Security’s VR-1.1 model outscores Claude Code and Codex on vulnerability repair
  2. 2026-11-03 09:16 · DEV Community — AI
    How to test a web app built with Claude Code or Cursor before you ship
  3. 2026-11-03 07:19 · DEV Community — AI
    T3 Code: A Free, Open-Source Control Panel for Claude Code, Codex and Other Coding Agents
  4. 2026-11-03 05:48 · DEV Community — AI
    The Claude Code Extension Backdoor That Lived in Cursor's Own Marketplace for 11 Hours
  5. 2026-11-03 05:42 · DEV Community — AI
    One API Key, One Balance: Wiring Models and Data APIs into Claude Code, Cursor and Codex
  6. 2026-11-03 03:26 · DEV Community — AI
    Is there a cheap API for Claude Code? Run a three-request test on any candidate before you pay
  7. 2026-11-03 03:08 · DEV Community — AI
    MCP server managers for Claude Code, Codex and Gemini CLI (2026)
  8. 2026-11-03 02:11 · DEV Community — AI
    Let Claude Code query your database read only with the DBX MCP server
  9. 2026-11-03 01:43 · DEV Community — AI
    Where Claude Code and Codex keep /goal state, and how one open-source app reads both
  10. 2026-11-03 00:03 · r/ClaudeAI
    Official Claude Code Extension Compromise: Security Advisory
  11. 2026-11-02 20:39 · DEV Community — AI
    Unslop Brings Staged UI Review to Claude Code and Codex
  12. 2026-11-02 20:32 · DEV Community — AI
    Your MCP server can read ~/.ssh. Here is how I put it in a jail
  13. 2026-11-02 20:07 · DEV Community — AI
    Go from idea to tested feature in Claude Code or Cursor with /spec, /plan and /build
  14. 2026-11-02 16:41 · DEV Community — AI
    Why we built Pilothouse: One inbox and PreToolUse rules for Claude Code, Codex, OpenCode, and Grok Build
  15. 2026-11-02 15:00 · Runway Research
    Runway Dev is in Claude Code, Codex and Cursor
  16. 2026-11-02 15:00 · Runway Research
    Runway News | Runway Dev is in Claude Code, Codex and Cursor
  17. 2026-11-02 11:42 · InfoWorld AI
    Cursor removes malicious Claude Code extension after SSH backdoor attempt
  18. 2026-11-02 09:21 · DEV Community — AI
    PingCode AI - Unified API for Claude Code, Codex & More
  19. 2026-11-02 09:19 · DEV Community — AI
    Claude Code hooks on Windows: when a Bash matcher sees nothing
  20. 2026-11-02 08:38 · DEV Community — AI
    How I run many Claude Code and Codex agents at once with a Chief that assigns the work
  21. 2026-11-02 07:42 · DEV Community — AI
    Run Claude Code for FREE with Ollama
  22. 2026-11-02 06:05 · DEV Community — AI
    Claude Code for Free in VS Code: No Login, No API Key (Ollama + Qwen 3.8)
  23. 2026-11-02 02:34 · DEV Community — AI
    Subscription Cancellation MCP Server: 4 Read-Only Tools for Claude, Cursor and VS Code
  24. 2026-11-01 20:24 · DEV Community — AI
    8 rules for Claude Code hooks that never get in Claude's way
  25. 2026-11-01 20:15 · AlphaSignal
    Kanzo Gives Coding Agents a Shared open-source Kanban Board in 4MB
  26. 2026-11-01 20:01 · DEV Community — AI
    Let Claude Code or Cursor debug your page in a real Chrome browser
  27. 2026-11-01 16:01 · DEV Community — AI
    Cloned a Stranger's Repo? Check 6 Agent Config Files Before Claude Code or Codex Opens It
  28. 2026-11-01 15:52 · DEV Community — AI
    Coincide: Claude Code, Codex, Cursor and more, side by side on your Mac
  29. 2026-11-01 14:22 · DEV Community — AI
    Using Claude Code, Codex and Gemini CLI on the same repository
  30. 2026-11-01 13:48 · DEV Community — AI
    Malicious Claude Code Extensions in the Wild: Why AI Agents Need Deterministic Outbound Gates
  31. 2026-11-01 10:54 · DEV Community — AI
    I gave Claude Code a crew. Codex and Gemini found a race in the plugin that runs them.
  32. 2026-11-01 10:19 · r/ClaudeAI
    I built a live file tree for Claude Code so I can see what it reads and edits (free, open source)
  33. 2026-11-01 07:05 · DEV Community — AI
    How to stop Claude Code, Cursor and Codex reading your .env file
  34. 2026-10-31 23:43 · DEV Community — AI
    "Buddy: let Claude Code, Codex and other AI agents use your Android phone
  35. 2026-10-31 23:27 · DEV Community — AI
    How to install and use agent skills in Claude Code, Cursor and Codex (with a free plugin marketplace)
  36. 2026-10-31 21:00 · DEV Community — AI
    I Let Claude Code Write a 20-Lesson Tutorial Course for My App From Its Codebase
  37. 2026-10-31 19:02 · DEV Community — AI
    Stop Claude Code from building the same generic landing page

More stories

  1. Keeping AI coding agent sessions in sync across machines — DEV Community — AI
  2. vincent 0.12.0: Bringing Structure to AI-Driven Software Development — DEV Community — AI
  3. Three MCP calls that answer "who is hiring ML engineers in Berlin right now?" — DEV Community — AI
  4. Human-in-the-loop AI coding: a developer decides what ships — DEV Community — AI
  5. Why the Model Context Protocol (MCP) Is Changing How We Connect AI Frameworks — DEV Community — AI
  6. What happens when you correct a coding agent twice — DEV Community — AI
  7. Spec-Driven Development: Combining OpenSpec & Superpowers for Zero-Hallucination AI Coding — DEV Community — AI
  8. Top 10 Essential MCP Servers Every AI Developer Needs in 2026 — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →