ML-DSA vs ECDSA vs RSA compared: 3,309 vs 64 vs 256-byte signatures, sign/verify speeds, library support and NIST IR 8547 ...

How a fake Google Update Support extension installs its components and runs the editor's own Electron binary as a Node ...

Tampered copies of Anthropic’s Claude Code extension reached Cursor users through its marketplace, potentially exposing up to ...

Developers installing Claude Code through Cursor’s extension marketplace were offered tampered packages designed to collect information about their computers and give attackers remote access. Cursor ...

This article is an explanatory piece based on reports from The Hacker News and official statements from Cursor, Anthropic, and Microsoft (as of the end of October 2026). English quotes in the text are ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...

Cursor removed a compromised Claude Code extension from its marketplace on October 29. This came after researchers found out ...