Hackers compromised version 2.1.313 of the Claude Code extension distributed through the Cursor Marketplace, embedding malicious JavaScript that establishes persistent SSH access on developer machines. Published on October 29, 2026, the tampered extension identifies itself as anthropic.claude-code and retains legitimate functionality while... Weiterlesen: Hackers Compromise Claude Code Extension in Cursor Marketplace to Ins…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Compromise Claude Code Extension in Cursor Marketplace to Install Persistent SSH Backdoor
Hackers compromised version 2.1.313 of the Claude Code extension distributed through the Cursor Marketplace, embedding malicious JavaScript that establishes…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
27 Quellen
CVE-2024-13362 | XT Quick View for WooCommerce Plugin on WordPress Parameter url cross site scripting
26 weitere Quellen
VVulDB Updatesvor 8 Std.CVE-2024-13362 | Notification Bar, Announcement and Cookie Notice Plugin Parameter cross site scripting VVulDB Updatesvor 8 Std.CVE-2024-13362 | Smart phone field for Gravity Forms Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 8 Std.CVE-2024-13362 | Bulk Auto Image Alt Text optimizer Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 8 Std.CVE-2024-13362 | Recent Post Slider and Banner Slider Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 6 Std.CVE-2024-13362 | TopNewsWp Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 6 Std.CVE-2024-13362 | Premmerce Permalink Manager for WooCommerce Plugin Parameter cross site scripting
+20
25 Quellen
CVE-2026-53317 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 wifi denial of service
24 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-53258 | Linux Kernel up to 6.18.35/7.0.12 wifi cfg80211_scan int_scan_req memory leak VVulDB Updatesvor 5 Std.CVE-2026-43042 | Linux Kernel up to 6.19.11 mpls platform_label out-of-bounds VVulDB Updatesvor 4 Std.CVE-2026-43185 | Linux Kernel up to 6.18.15/6.19.5 smb_direct_prepare_negotiation buffer overflow VVulDB Updatesvor 4 Std.CVE-2026-43244 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 kcm_write_msgs null pointer dereference VVulDB Updatesvor 4 Std.CVE-2026-43271 | Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 process_metadata_update null pointer dereference VVulDB Updatesvor 4 Std.CVE-2026-43250 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 ChipIdea UDC Driver _ep_nuke memory corruption
+18
9 Quellen
Claude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up
8 weitere Quellen
GGoogle Alertvor 1 Std.Claude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert | heise online KKitPloitvor 4 Std.claude-code-backdoor-check CCyber Security Newsvor 4 Std.Microsoft Warns of Trojanized Claude Code Extension Planting Persistent SSH Backdoor IIT Security Newsvor 4 Std.Anthropic’s Claude Bypasses AI Safety Checks, Triggering Blackmail and Code Sabotage in Tests CCyber Securityvor 17 Std.🔓 Cybersecurity: Claude Code: Millionenfach installierte Cursor-Erweiterung kompromittiert MMicrosoft Security Blogvor 8 Std.Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4308651/sichere-programmierung/hackers-compromise-claude-code-extension-in-cursor-marketplace-to-install-persistent-ssh-backdoor/