Trojanized Claude Code extension for Cursor hit developers
Malicious version 2.1.313 stole data and, in a minority of cases, could give persistent privileged access.
76
Organization
OpenSourceMalware
- Mentions · 7d5
- Mentions · 30d11
- All mentions13
- First seenAug 21, 2026
- Last mentioned12h ago
Timeline
13 articles · newest firstMalicious Claude Code extension on Cursor planted SSH backdoors
Version 2.1.313 was listed for about 11 hours on October 29 and may have reached 5,000 developers.
74
Malicious Claude Code VS Code extension installed an SSH backdoor
Cursor says at most 5,000 users got version 2.1.313 on October 29; Anthropic replaced it with 2.1.314.
78
Malicious Claude Code extension on Open VSX plants an SSH backdoor
OpenSourceMalware says anthropic.claude-code 2.1.313 adds an SSH key, reverse tunnel, and startup scripts; Anthropic’s official release is not shown compromised.
74
Brotli decoder flaw CVE-2026-111497 can enable RCE in Node.js and .NET
Public PoCs show memory corruption on unpatched Node.js 24.22.0; no in-the-wild Node2Shell attacks were reported as of publication.
74
Info-stealer slipped into OVHcloud CLI GitHub releases
Tampered builds v0.11.0 through v0.15.0 were live for under two hours on October 19; v0.16.0 is clean.
74
GhostAction workflows in 790 GitHub repos hunt cloud and AI keys
OpenSourceMalware's count through October 9 is validated public repos, not proof that every one leaked secrets.
74
OVHcloud CLI releases 0.11.0–0.15.0 backdoored on GitHub to steal secrets
A hijacked GitHub account pushed trojanized binaries for about 90 minutes on October 19; 0.10.0 and 0.16.0 are clean.
74
Hijacked account swapped five OVHcloud CLI releases with a secret-stealer
The swapped archives were live for up to 94 minutes on October 19 and only reached unhashed installs on selected platforms.
74
GhostAction plants malicious workflows in 790 GitHub repositories
October payloads mine full Git history for cloud and AI keys and post them over HTTP to 193.32.204.199.
76
GhostAction plants font-disguised stealer in 94 GitHub repositories
Phishing via my-github.com steals GitHub passwords, 2FA, and OAuth tokens, then a VS Code task runs a credential stealer.
64
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Researchers discovered WeaselBiscuit, a stripped-down JavaScript stealer delivered via 13 malicious npm packages, harvesting Chrome extension storage with suspected DPRK links.
58
16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
Typosquatted RubyGems packages deliver the StubMaker infostealer, stealing browser credentials, crypto wallets, and Telegram data from Windows developers.
55
Related CVEs
by mentions- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
Appears with
- Anthropicvendor · 4
- OVHcloudvendor · 3
- Claude Codeproduct · 3
- Cursorvendor · 3
- OVHcloud CLIproduct · 3
- GitHuborganization · 3
- GitHub Actionsproduct · 3
- Googlevendor · 2
- Microsoftvendor · 2
- Socketorganization · 2
- GhostActionthreat actor · 2
- StepSecurityorganization · 2
- GitHubvendor · 2
- GitGuardianorganization · 2
- Ubervictim · 2
- Phorionorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.