Publication

Cursor’s incident now covers two tampered Claude Code extension builds: 2.1.312 and 2.1.313. Expel saw reverse SSH tunnels on 4 Macs. Uninstalling may leave persistence, so check every Cursor machine. t.co/xfHGVUYJry t.co/3IVcXRXJyB #SupplyChainSecurity

🚨 Claude Code extension compromised on Cursor! A malicious version (2.1.313) attempted to install a persistent SSH backdoor, potentially affecting up to 5,000 users. Cursor removed it. If you installed this version, check your system. 🔗 Details: t.co/xfHGVUZhh6