English translation is being prepared.
Matched fieldsTitle
←Search results
Search “Anthropic”
English translation is being prepared.
Matched fieldsTitle
English translation is being prepared.
Matched fieldsTitle
English translation is being prepared.
Matched fieldsTitle
English translation is being prepared.
Matched fieldsTitle
English translation is being prepared.
Matched fieldsTitle
English translation is being prepared.
Matched fieldsTitle
English translation is being prepared.
Matched fieldsTitle
English translation is being prepared.
Matched fieldsTitle
Cursor reports that a malicious Claude Code version has appeared in the marketplace
On October 29, 2026, Cursor reported that a maliciously tampered version of Anthropic.claude-code 2.1.313 had appeared in its extension marketplace. This version was not developed by Anthropic and affected at most 5,000 users. Cursor stated that the malicious code collects host and user information, attempts to write the attacker's SSH public key, and establishes a reverse SSH tunnel; however, due to permission restrictions, this step fails on most macOS and Windows hosts. Cursor has removed the version, rebuilt the marketplace, and shut down the attacker's servers, while also providing a command to detect the svc-telemetry public key and cleanup scripts for macOS and Windows. The next day, Phorion disclosed that extension 2.1.313 had been implanted with a persistent SSH backdoor, and stated that Cursor had withdrawn the version from NPM and the VSCode registry; Phorion also pointed out a flaw in the Remote Login status check on macOS, which skips the enabling step on machines where SSH is not enabled, but the key and persistence still take effect.
On October 29, 2026, Cursor reported that a maliciously tampered version of Anthropic.claude-code 2.1.313 had appeared in its extension marketplace. This version was not developed by Anthropic and affected at most 5,000 users. Cursor stated that the malicious code collects host and user information, attempts to write the attacker's SSH public key, and establishes a reverse SSH tunnel; however, due to permission restrictions, this step fails on most macOS and Windows hosts. Cursor has removed the
Matched fieldsSummary
360's Tu Longfeng tops CyberGym with a 99.4% vulnerability reproduction success rate
360 Group's self-developed AI security attack-defense system Tu Longfeng topped the CyberGym benchmark with a 99.4% vulnerability reproduction success rate, competing on the same leaderboard against models and agents from vendors including OpenAI, Anthropic, and Google. The evaluation covered 1,507 tasks, and Tu Longfeng achieved success rates of 99.27%, 99.47%, and 99.40% across three independent rounds of evaluation, averaging 99.38%. 360 said Tu Longfeng has discovered more than 15,000 vulnerabilities in total, and over 500 enterprises have already connected to the system to conduct security testing.
feng topped the CyberGym benchmark with a 99.4% vulnerability reproduction success rate, competing on the same leaderboard against models and agents from vendors including OpenAI, Anthropic, and Google. The evaluation covered 1,507 tasks, and Tu Longfeng achieved success rates of 99.27%, 99.47%, and 99.40% across three independent rounds of evaluation, averaging 99.38%. 360 said Tu Longfeng has discovered more than 15,000 vulnerabilities in total, and over 500 enterprises have already connected
Matched fieldsSummary
Cursor discloses malicious Claude Code extension incident in its extension marketplace
Cursor disclosed that a tampered Claude Code VS Code extension appeared in its IDE extension marketplace, affecting up to 5,000 users, and stated that the malicious version was not developed by Anthropic. Cursor took the extension marketplace offline the same day, worked with the relevant service providers to remove the malware, restored the marketplace after confirming there was no further risk, and required all users to upgrade to Claude Code for VS Code version 2.1.314. Subsequent reports said the tampered extension was version 2.1.313, went live on October 29 and remained available for about 11 hours, and may have been downloaded by up to 5,000 developers; the malware attempted to install a persistent SSH backdoor, collected the names of environment variables related to usernames, hostnames, public IP addresses, Git email addresses and sensitive credentials and sent them to an attacker-controlled server, and also added an attacker-controlled SSH key to achieve persistence. Cursor has taken down the extension and temporarily shut down the entire extension marketplace to review other plugins and rotate access keys, while working with its hosting provider to shut down the attacker's server, but it has not yet explained how the attacker published the tampered package under Anthropic's name.
ed that a tampered Claude Code VS Code extension appeared in its IDE extension marketplace, affecting up to 5,000 users, and stated that the malicious version was not developed by Anthropic. Cursor took the extension marketplace offline the same day, worked with the relevant service providers to remove the malware, restored the marketplace after confirming there was no further risk, and required all users to upgrade to Claude Code for VS Code version 2.1.314. Subsequent reports said the tampered
Matched fieldsSummary
Cursor reports malicious Claude Code extension version appearing in marketplace
On October 29, 2026, Cursor reported that a maliciously tampered version of Anthropic.claude-code 2.1.313 had appeared in its extension marketplace. This version was not developed by Anthropic and affected at most 5,000 users. Cursor stated that the malicious code collects host and user information, attempts to write the attacker's SSH public key, and establishes a reverse SSH tunnel; however, due to permission restrictions, this step fails on most macOS and Windows hosts. Cursor has removed the version, rebuilt the marketplace, and shut down the attacker's servers, while also providing a command to detect the svc-telemetry public key and cleanup scripts for macOS and Windows. The next day, Phorion disclosed that extension 2.1.313 had been implanted with a persistent SSH backdoor, and stated that Cursor had withdrawn the version from NPM and the VSCode registry; Phorion also pointed out a flaw in the Remote Login status check on macOS, which skips the enabling step on machines where SSH is not enabled, but the key and persistence still take effect.
Matched fieldsSummary
View story:Cursor reports that a malicious Claude Code version has appeared in the marketplace