2026-11-02 23:17 UTC
Claude Code official Cursor extension gets malware back door
Signing official extensions is not fast moving enough
www.youtube.com/watch?v=n1gNYxxq8U0&list=UU9rJrMV… - video
…libsyn.com/20261030-proton-mail-goes-full-ai-slo… - podcast
time: 5 min 04 sec
Replies (1)
-
@Moonrise2473@feddit.it 2026-11-03 06:05
I understood that it was not the official extension, is just cursor allowed a random to call themselves “anthropic” and publish an “official 😉” extension The victims were lucky: the attacker was not skilled enough as the script wanted root access to enable ssh on :22 and it failed in most cases, infecting only the idiots running a vibe code tool as root