A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Cursor has disclosed malicious versions of the Anthropic.claude-code extension in its VS Code Extension Marketplace that ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

Unlike many bulk-generated skill repositories, this collection focuses on real-world Agent Skills created and used by actual engineering teams, not mass AI‑generated stuff. Compatible with Claude Code ...

A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specialized expert with personality, ...

A booby-trapped version of the Claude Code extension was served to Cursor users for about 11 hours on October 29.