Developers updated their AI coding assistant last week. Some of them got a backdoor. 🚨 On 29 October, two malicious versions (2.1.312 and 2.1.313) of the Claude Code extension appeared in Cursor's extension marketplace for about 11 hours. Anthropic didn't build them. Someone else slipped them in. What they did: 🔍 Sent the attacker your hostname, username, Git email and public IP 🔑 Added the attacker's SSH key to your machine 🕳️ Tried to open a reverse SSH tunnel back to the attacker 🔁 On Ma
0:54
Developers updated their AI coding assistant last week. Some of them got a backdoor. 🚨 On 29 October, two malicious versions (2.1.312 and 2.1.313) of the Claude Code extension appeared in Cursor's extension marketplace for about 11 hours. Anthropic didn't build them. Someone else slipped them in. What they did: 🔍 Sent the attacker your hostname, username, Git email and public IP 🔑 Added the attacker's SSH key to your machine 🕳️ Tried to open a reverse SSH tunnel back to the attacker 🔁 On Ma
361 views18 hours ago
TikTokempiricaltraining
See more
Static thumbnail place holder