Tooling5d ago
Cursor marketplace served a tampered Claude Code 2.1.313 extension with an SSH backdoor, affecting at most 5,000 users
Cursor posted a security notice on X at 07:46 UTC on Oct 30: version 2.1.313 of Anthropic.claude-code in its VS Code extension marketplace was a maliciously modified build, not developed by Anthropic, available from about 2:27am to 1:35pm PT on Oct 29 and affecting at most 5,000 users. The payload collects host details, adds an attacker SSH key, tries to open a reverse SSH tunnel and installs persistence. Cursor pulled the version, shut down and rebuilt the marketplace, rotated keys and had the attacker server taken offline; it asks users to update Claude Code for VS Code to 2.1.314 and follow the check and cleanup steps in its blog post.
Tooling6d ago
Symantec finds a grey-market relay that installs the real Codex and Claude Code CLIs, then turns off sandboxing and routes every request through its own servers
On Oct 29 Symantec's Threat Hunter Team disclosed an unauthorized AI relay seen at about a dozen organizations since early 2026, mostly in mainland China. Users install the genuine Codex or Claude Code CLI via npm, then run a one-line script from the reseller that rewrites ~/.codex/config.toml or ~/.claude/settings.json, points base_url at relay domains, swaps in relay-issued keys, sets the sandbox to danger-full-access and disables telemetry. Symantec says this is not a CLI vulnerability and it has seen no abuse so far.
Tooling8d ago
X discussion: former OpenAI researcher Will Depue says Anthropic is "massively underplaying" the Cathedral security test, drawing about 2,000 likes and 180K views
Will Depue, whose X bio says he previously worked at OpenAI on Sora 1 and 2 and on o3/4o post-training, posted on Oct 28 that Anthropic is "massively underplaying" the recent security incident and that he is "hearing" Cathedral got full administrator access to the company Slack workspace. The post drew about 2,000 likes, 600+ bookmarks and roughly 180K views. This is an unconfirmed secondhand claim; Anthropic told reporters the researchers reached only a limited set of sales, HR and IT systems and did not touch Claude conversations, source code or model weights.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.