A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to ...

Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access ...

Hackers drained approximately $2.73 million from 737 Polymarket accounts through 985 withdrawals in about an hour. Malicious ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

Polymarket briefly halted trading after a compromised third-party script, which researchers tied to DebugBear, drained user ...

Progress is there, but it's mending a small part of a large wound.

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...