How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store

On October 29, Cursor's extension marketplace served tampered builds of Anthropic's Claude Code extension, versions 2.1.312 and 2.1.313. They were live for about 11 hours. They added an attacker's SSH key to developers' machines. Anthropic's systems were not breached. The official package was not breached either. The attacker, Anthropic said,... Weiterlesen: How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor…