← Azimuth Daily
Capturing data…
Capturing data…
SAT, 31 OCT · 72 ITEMS
Hacker News, r/LocalLLaMA, The Register + 2 more · AI & Technology
5 outletsFraming varies: The Register emphasizes Anthropic's distancing statement, while Reuters and other outlets focus on Cursor's estimate of up to 5,000 affected users, so the main split is over responsibility rather than the core facts.
is Anthropic's AI coding assistant, and this is a supply-chain attack on its : a trojanized build (reported as v2.1.313) of the officially named Anthropic.claude-code extension was distributed through Cursor's extension marketplace. On install or update, it added an attacker-controlled SSH key to the developer's machine, installed persistence so the access survived reboots, and sent host details back to the attacker — effectively giving remote shell access to developers' laptops. Cursor has publicly said up to 5,000 users may have been affected. The open question is whether Anthropic's own distribution pipeline was breached or an attacker republished a malicious package under the official extension's name.
The primary source is Cursor's own security notice, with independent analyses from security firms (Phorion, OX Security) matching on the same indicators: rogue package, added SSH key, persistence, and host-data exfiltration. So the core claim — that a backdoored Claude Code extension was distributed and reached up to roughly 5,000 users — is well corroborated. The 'Anthropic hacked' framing is weaker: some coverage indicates Anthropic disputed that the extension came from its own systems, so that part is not established.
Genuinely new: the advisory and all major coverage are dated October 30, 2026, the same day as this item.