On October 29, Cursor's extension marketplace served tampered builds of Anthropic's Claude Code extension, versions 2.1.312 and 2.1.313. They were live for about 11 hours. They added an attacker's SSH key to developers' machines. Anthropic's systems were not breached. The official package was not breached either. The attacker, Anthropic said,... Weiterlesen: How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor…
Intelligence View
⚡ tsecurity.de Intelligence
How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store
On October 29, Cursor's extension marketplace served tampered builds of Anthropic's Claude Code extension, versions 2.1.312 and 2.1.313. They were live for…
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir