Eclipse Foundation

Search everything

Mentions · 7d1
Mentions · 30d2
All mentions2
First seenOct 15, 2026
Last mentioned8h ago

Timeline

2 articles · newest first

Poisoned Claude Code extension on Open VSX planted an SSH backdoor

Version 2.1.313 was on Cursor’s marketplace for about 11 hours; Cursor says at most 5,000 users were affected.

Help Net Securityupdated 18:16 UTC · 1h agofirst 11:15 UTC · 8h agoMalware 9 sources1

Eclipse Foundation Eclipse Milo

CISA warns Eclipse Milo through 1.1.4 has six high-severity flaws; users should move to 1.1.5.

CISA AdvisoriesOct 15, 12:00 UTC · 15d agoVulnerabilityCVE-2026-63252 CVE-2026-63248 CVE-2026-60007+35

Related CVEs

by mentions

CVE-2026-60007<1%9.1
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other…
published Aug 4, 2026eclipse milo
CVE-2026-58080<1%8.8
In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`
published Aug 4, 2026eclipse milo
CVE-2026-63252<1%8.7
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects…
published Aug 4, 2026eclipse milo
CVE-2026-62927<1%8.7
In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization…
published Aug 4, 2026eclipse milo
CVE-2026-63248<1%6.9
In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization
published Aug 4, 2026eclipse milo
CVE-2026-61387<1%6.9
In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe
published Aug 4, 2026eclipse milo

Appears with

Cursorvictim · 1
CISAorganization · 1
Microsoftorganization · 1
Open VSXproduct · 1
Claude Codeproduct · 1
Phorionorganization · 1
Cursorproduct · 1
Anthropicvendor · 1
Eclipse Foundationvendor · 1
Eclipse Miloproduct · 1

Entities are extracted by the model from each article. First seen Oct 15, 2026, last mentioned 8h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.