Cursor Composer 2.5 AI agent deletes code and fails tests
Cursor's Composer 2.5 agent over-deletes functions, forgets parameters and mishandles refactoring while introducing new errors during coding tasks.
Stories per day · 30 days
1 RSS
Relatedsupply-chain17claude-code14ssh-backdoor11claude9vscode7anthropic4backdoor3developer-tools3infostealer3open-vsx3vs-code3ai-coding2aoki2aur0ra2chatgpt2claude-desktop2cobalt-strike2codex2
47 stories, newest first · one card per story
Stories tagged #cursor
Musk throttles Grok Bot limits over unsustainably high costs
Some users saw weekly quotas jump to 100% over Halloween; Musk has not said how limits will change next.
Cursor removes malicious Claude Code extension after SSH backdoor attempt
A malicious version of the Claude Code extension distributed through the Cursor marketplace for 11 hours installed SSH backdoors on developer machines.
Cursor Marketplace Hosts Malicious Claude Code Extension
Versions 2.1.312 and 2.1.313 of Anthropic's Claude Code extension were maliciously published for 11 hours targeting macOS and Windows users.
1
Malicious Claude Code extensions install persistent SSH backdoors
Cursor removes Anthropic.claude-code extensions 2.1.312 and 2.1.313 after they create SSH backdoors on developer systems.
Cursor: malicious Claude Code extension with SSH backdoor live 11 hours
Versions 2.1.312 and 2.1.313 collected host data and tried a reverse SSH tunnel; Cursor says most logins failed.
1
Malicious Claude Code extensions on Cursor planted an SSH backdoor
Cursor says versions 2.1.312 and 2.1.313 were available from about 2:27 AM to 1:35 PM PDT on October 29.
1
Tampered Claude Code Cursor extension plants a persistent SSH backdoor
Versions 2.1.313 and 2.1.312 were served for hours on October 29; Microsoft says VS Marketplace and npm were not affected.
3
Anthropic VS Code extension on Cursor backdoored for nearly 12 hours
Version 2.1.313, published on Anthropic’s official Cursor account, tried to install a persistent SSH backdoor on up to 5,000 machines.
Malicious Claude Code extension reached up to 5,000 Cursor users
A marketplace backdoor stayed live about 11 hours, but a design flaw stopped it on most devices.
1
Trojanized Claude Code extension for Cursor hit developers
Malicious version 2.1.313 stole data and, in a minority of cases, could give persistent privileged access.
1
Tampered Claude Code extension in Cursor marketplace stole host data
Cursor says the listing was live about eleven hours and may have reached 5,000 users before the marketplace was taken offline.
Tampered Claude Code extension on Cursor planted an SSH backdoor
Version 2.1.313 was downloadable for about 11 hours and could have reached up to 5,000 developers; official Anthropic channels were not affected.
1
GOLD OGRE used Cursor agents to reach domain admin for Aur0ra
Sophos says three networks where agents gained domain management later appeared on the Aur0ra leak site.
Claude Code VS Code extension reportedly compromised on Open VSX
The oss-security note says the Microsoft Visual Studio Marketplace copy was allegedly not affected, but the post is incomplete.
Poisoned Claude Code extension on Open VSX planted an SSH backdoor
Version 2.1.313 was on Cursor’s marketplace for about 11 hours; Cursor says at most 5,000 users were affected.
1
Backdoors claimed in official Claude Code VS Code and Cursor extensions
The linked post body did not load, so only the title states the backdoor claim.
Backdoored Claude Code 2.1.313 shipped to VS Code and Cursor
The build tried to plant a persistent SSH reverse tunnel before Anthropic replaced it with 2.1.314.
4
Malicious Claude Code VS Code extension installed an SSH backdoor
Cursor says at most 5,000 users got version 2.1.313 on October 29; Anthropic replaced it with 2.1.314.
4
Researchers find 'Embrace' embedded-browser flaws in five AI coding tools; Codex and VS Code unpatched
Flaws in Codex and VS Code remain unpatched; Cursor silently fixed code execution and GitHub fixed Copilot spoofing in 1.1.29.
1
Embedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
Cursor releases Agent SDK for code-defined agents
Teams can define agents in TypeScript and Markdown, run evals, and deploy them to Cursor or their own Node process.
Malware planted in 42 GitHub repos targets Claude, Gemini and Cursor
Hooks in .github/init.js run at session start; JFrog links the traps to the testmetest npm campaign.
Aokigahara infostealer steals ChatGPT, Claude, Codex, and Cursor logins
Check Point says the Windows stealer also grabs cloud, SSH, and browser secrets, not via flaws in those AI apps.
2