A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Microsoft's latest TypeScript beta adds content mappers and new compiler APIs aimed at developer tooling and framework integration.

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

Linden Lab’s Anya Kanevsky explains how Luau, Visual Studio Code integration, live iteration, and an established creator ...

Compare the best code security review tools of 2026 for pull requests and CI. See how Endor Labs and 8 others review ...

A compromised version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours ...

Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...