Back to Latest SignalSECURITYWEEK / SECURITY

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

Source: SecurityWeek ยท NOV 02, 2026

The extension performed host reconnaissance and attempted to create a reverse SSH tunnel. The post Malicious Claude Code Extension Served in Cursor Supply Chain Attack appeared first on SecurityWeek .

IN THIS STORY
  • Claude Code
  • Cursor
  • AI security

Sources

  • Read the original at SecurityWeek

On Bluesky

  • ๐Ÿ—ž Malicious Claude Code Extension Served in Cursor Supply Chain Attack via SecurityWeek https://www.securityweek.com/malicious-claude-code-extension-served-in-cursor-supply-chain-attack/ #cybersecurity #infosec #threatintel

    @ninjaintelgroup.bsky.social Nov 2, 2026 ยท 1 like

Related on Frontier

  • Cursor removes malicious Claude Code extension after SSH backdoor attempt Nov 2, 2026
  • Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor Oct 30, 2026
  • Devs Hit by Trojanized Claude Code Extension for Cursor Oct 30, 2026
  • Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish (Felix Rieseberg/@felixrieseberg) Oct 31, 2026
  • DeepSeek Drops Enhanced Coding Agent With Aim to Rival Anthropic Oct 31, 2026
MORE LATEST SIGNALSIGNALS