Cursor says tampered Claude Code extension affected up to 5,000 users

Supply-chain attack on AI coding tools shows agents and extensions are a growing enterprise security risk.

Cursor disclosed that a trojanized Claude Code extension on Open VSX installed a persistent SSH backdoor, affecting up to 5,000 users. Unauthorized Codex and Claude Code relays also disabled AI sandboxes, redirecting enterprise data.

Domain

general

Read it at CNA → 💬 19 on HN

Coverage: 10 sources, in order

1. 30 Oct 05:04 RuntimeWire Read the article →
2. 30 Oct 08:05 Unite.AI Read the article →
3. 30 Oct 08:32 CNA Read the article →
4. 30 Oct 08:33 Reuters Read the article →
5. 30 Oct 08:50 CyberSecurityNews Read the article →
6. 30 Oct 08:55 The Hacker News Read the article →
7. 30 Oct 08:55 The Hacker News Read the article →
8. 30 Oct 09:20 CyberSecurityNews Read the article →
9. 30 Oct 09:23 Step Security Read the article →
10. 30 Oct 11:05 Hacker News Read the article →

← Front page