Type Research & news
Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor.
Productclaude
Show
Density
…Loading feed…
Loading feed…
No Critical or High events in this view.
Updated
Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor.
Claude Code settings files have been found to expose thousands of secrets on GitHub, potentially affecting users who have shared these files.
The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.
Microsoft analyses a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it.
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to…
Help Net Security newsletters: Daily and weekly news, cybersecurity jobs, open source projects, breaking news – subscribe here!
Reports describe fake ChatGPT and Claude applications distributing malware through signed AI binaries.
End of feed