VS Code now has it all.

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still unpatched.

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Cursor has disclosed malicious versions of the Anthropic.claude-code extension in its VS Code Extension Marketplace that ...

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...

Cursor, the coding-tool company owned by SpaceX, said on Friday that a maliciously modified version of Anthropic’s Claude ...

OpenSourceMalware says a Claude Code extension artifact on Open VSX, version 2.1.313, added an attacker SSH key, opened a ...

Attackers backdoored the official Claude Code VS Code extension, being distributed on the Cursor Marketplace, designed to ...