A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still ...

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Cursor has disclosed malicious versions of the Anthropic.claude-code extension in its VS Code Extension Marketplace that ...

VS Code, Cursor, and Google Antigravity are three popular options for AI-assisted coding, but how do they compare when given the exact same challenge? I wanted to see how they would handle a complex ...

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...

OpenSourceMalware says a Claude Code extension artifact on Open VSX, version 2.1.313, added an attacker SSH key, opened a ...

Anurag is an experienced journalist and author who’s been covering tech for the past 5 years, with a focus on Windows, Android, and Apple. He’s written for sites like Android Police, Neowin, Dexerto, ...

Attackers backdoored the official Claude Code VS Code extension, being distributed on the Cursor Marketplace, designed to ...

I write about AI coding agents a lot, and somewhere along the way I'd decided the model was doing all the heavy lifting. Swap Claude Code for Codex or Cursor, keep the same brain underneath, and you ...