A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...

Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...

A forgotten Popcorn Time updater left up to 350,000 Macs open to takeover. Here’s what researchers found and why you should ...

The developers of Draw Things have launched Local Code, an open-source AI assistant that lets Mac users download models and ...

Polymarket has promised to refund traders after a breach involving a website supplier. Some users reported that their ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Software supply chain attacks are a practical risk for any organisation that builds, buys, or runs software. The issue is not limited to open source packages. It also includes source control, build ...

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those machines the attacker could not have logged in through the tunnel. The company ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...