Anthropic VS code extension on Cursor backdoored for nearly 12 hours

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, multiple sources reported Friday. Anthropic so far has yet to warn customers of ...
Help Net Security

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still ...
SecurityWeek

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
runtimewire.com

Tampered Claude Code extension in Cursor marketplace attempted a persistent SSH backdoor

OpenSourceMalware says a Claude Code extension artifact on Open VSX, version 2.1.313, added an attacker SSH key, opened a ...
Microsoft

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
GitHub

Awesome Agent Skills

Unlike many bulk-generated skill repositories, this collection focuses on real-world Agent Skills created and used by actual engineering teams, not mass AI‑generated stuff. Compatible with Claude Code ...