AIQB
TutorialsOrdinary

How a Trusted Extension Name Delivered an SSH Backdoor Through Cursor's Store

Source: DEV Community·
ClaudeCursor

Summary

A tampered Claude Code extension sat in Cursor's marketplace for about 11 hours. Here is the delivery chain that made it look like a normal update.
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-5cff0616bd57ca6e79986004
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
How I hand one conversation between Claude Code, Codex and four other coding agents
How Coincide, an open-source Mac app, lets a thread move between Claude Code, Codex, Cursor, Grok Build, OpenCode and Antigravity without re-explaining the task.
Source: DEV Community · Claude / Grok / Cursor
TutorialsOrdinary
Use AI Coding Agents Like a Pro: Fewer Tokens, Better Code
A practical playbook for Claude Code, Codex, Cursor and Copilot: manage context, cut token spend, and get code you can actually ship.
Source: DEV Community · Claude / Cursor
TutorialsOrdinary
Binance hack, Claude Code extension backdoor, Northflank and Mistral Large 4: what each source says
The Binance theft totals from TRM and Elliptic, Cursor's notice on a modified Claude Code 2.1.313, Northflank's incident timeline and the Mistral Large 4 license clause.
Source: DEV Community · Claude / Cursor / Mistral
TutorialsOrdinary
Cursor Marketplace vs. Official Claude Code: What Version 2.1.313 Reveals
A developer sees the familiar Anthropic name and anthropic.claude-code identifier in an editor,...
Source: DEV Community · Claude / Cursor
TutorialsOrdinary
Introducing tobira: Every Database, One Terminal, and One MCP Server for Your Agents
tobira is an open-source Go CLI and TUI for 31 databases with a read-only guard, an AI assistant, an MCP server for Claude Code and Cursor, and an agent skill.
Source: DEV Community · Claude / Cursor
TutorialsOrdinary
How I built a zero-install Remote MCP Server for Cursor & Claude (and why local npm packages suck)
Anthropic’s Model Context Protocol (MCP) is arguably the most exciting architectural standard to hit...
Source: DEV Community · Claude / Cursor
TutorialsOrdinary
Your AI said "fixed" but never ran the tests? I made a plugin that won't let it say "done" until they pass
You ask Claude Code, Codex, Cursor, etc. for a quick fix. It changes the code and says "Fixed ✅"....
Source: DEV Community · Claude / Cursor
TutorialsOrdinary
How to Add a Remote MCP Server to Cursor, Claude Code, VS Code and Claude Desktop (Tested)
Tested configs for adding a remote MCP server to Cursor, Claude Code, VS Code and Claude Desktop, plus curl checks, mcp-remote and the real token cost.
Source: DEV Community · Claude / Cursor
TutorialsOrdinary
Cẩm Nang Anti-Slop: Thiết Lập Hệ Thống Kỷ Luật Cho Cursor, Claude Code & Antigravity
Nếu bạn đang dùng Cursor, Claude Code, Google Antigravity hay ChatGPT để làm sản phẩm một mình, chắc...
Source: DEV Community · ChatGPT / Claude / Cursor
TutorialsOrdinary
Is Cursor Safe? I Checked the Security Settings of Cursor, Postman and Claude (Electron Fuses)
Cursor scored 0/6, Postman 1/6 and Claude 6/6 on Electron security hardening. What it means, whether Cursor is safe, and how to check any Electron app in one command.
Source: DEV Community · Claude / Cursor