Tooling6d ago
Cursor marketplace served a tampered Claude Code 2.1.313 extension with an SSH backdoor, affecting at most 5,000 users
Cursor posted a security notice on X at 07:46 UTC on Oct 30: version 2.1.313 of Anthropic.claude-code in its VS Code extension marketplace was a maliciously modified build, not developed by Anthropic, available from about 2:27am to 1:35pm PT on Oct 29 and affecting at most 5,000 users. The payload collects host details, adds an attacker SSH key, tries to open a reverse SSH tunnel and installs persistence. Cursor pulled the version, shut down and rebuilt the marketplace, rotated keys and had the attacker server taken offline; it asks users to update Claude Code for VS Code to 2.1.314 and follow the check and cleanup steps in its blog post.
Tooling8d ago
Cursor Design Mode adds Annotate: point, draw and edit text on your running app to send visual prompts to agents
On Oct 27 Cursor announced Annotate for Design Mode: in the Agents Window browser you can click elements, box an area, draw markup, edit text in place or tweak CSS, and each note is sent to the agent with element details and a screenshot so it can edit the code. The post says you can also review designs at different screen sizes. It needs Cursor 3.24.18 or later, and the shortcut is Cmd+Shift+D.
Tooling9d ago
Cursor adds DeepSeek V4.1 Flash: all four effort levels sit on the CursorBench 4.0 cost frontier, with Max scoring 47.7% at $0.98 per task
Cursor announced on Oct 26 (UTC) that DeepSeek V4.1 Flash is now available in Cursor and can be turned on under Cursor Settings > Models. Cursor says every effort level sits on the CursorBench cost frontier, from $0.60 to $0.98 per task, with no model scoring higher at those prices. The official CursorBench 4.0 leaderboard lists DeepSeek V4.1 Flash 1017 at 47.7% on Max ($0.98 per task), 46.3% on Medium ($0.80), 45.6% on High ($0.77) and 44.9% on Low ($0.60). The top score on the board, Opus 5.5 Max, is 57.8% but costs $13.43 per task.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.