Today we identified a security incident involving a specific extension package in the Cursor VS Code extension Marketplace: Anthropic.claude-code version 2.1.313.
Official Claude Code Extension Compromise: Security Advisory | Phorion
Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent SSH backdoor across macOS, Linux, and Windows. This write-up …
Kevin Beaumont (@GossiTheDog@cyberplace.social)
Anthropic got compromised. Their Claude Code extension on Visual Studio Code and Cursor has malware in it, which creates a remote access Trojan to desktops. https://phorion.io/blog/offical-claude-code-vsx-compromise/
Comment and Control: Prompt Injection to Credential Theft in Claude Code, Gemini CLI, and GitHub Copilot Agent
Anthropic Claude Code Security Review, Google Gemini CLI Action, and GitHub Copilot Agent are vulnerable to prompt injection via GitHub comments — turning PR titles, issue bodies, and issue comments into attack vectors for API key and token theft.
zak.eth on Twitter / X
🚨 UPDATE: Full Post-Mortem On Cursor Security IncidentIn yesterday’s thread I explained how I got drained after installing a malicious extension in @cursor_ai.This is the deeper dive into what I found, what I did, and how you can avoid it.🧵 👇— zak.eth (@0xzak) August 13, 2025
Origin Code Hosting · Cursor
Origin begins rolling out today in early beta on all paid plans. We're starting with the essentials, designed for agent scale: repos, pull requests, code browsing, and GitHub sync. Agent-native features ship soon.
Anthropic secretly installs spyware when you install Claude Desktop — That Privacy Guy!
Anthropic's Claude Desktop silently installs a Native Messaging bridge into seven Chromium browsers, including browsers Anthropic's own documentation says it does not support, and browsers the user has not even installed.
Anthropic hacked to deliver remote access trojan to Claude developer laptops worldwide
Yesterday, Anthropic were compromised and used to stage a global supply chain attack.
Researcher hacks Claude Code Chrome fix in 3 hours
Researchers say a flaw in Claude Code’s Chrome extension let any browser extension hijack AI actions – and Anthropic’s patch was bypassed in just 3 hours.
Claude Code Is Steganographically Marking Requests
I inspected Claude Code for privacy reasons and found hidden system prompt markers based on API base URL and timezone.
Bastian Greshake Tzovaras (@gedankenstuecke@scholar.social)
It's great that a class of tool that by its very design is an unfixable security issue is forced into everything: «This works often enough that Måløy reported this to Microsoft as a security hole in March. He gave them a 90-day reporting window, Microsoft extended that twice to a total of 144 days, and they still didn’t have a solid fix. So Måløy posted about the hole on July 28th.» Copilot prompt injection goes viral in your documents https://pivot-to-ai.com/2026/08/03/copilot-prompt-injection-goes-viral-in-your-documents/
Ten Lines Of Code That Changed My World – Pixelambacht
Front-end antics and typographic mischievousness
Gergely Orosz on Twitter / X
This is either brilliant or scary:Anthropic accidentally leaked the TS source code of Claude Code (which is closed source). Repos sharing the source are taken down with DMCA.BUT this repo rewrote the code using Python, and so it violates no copyright & cannot be taken down! pic.twitter.com/uSrCDgGCAZ— Gergely Orosz (@GergelyOrosz) March 31, 2026
Is Claude Code Secretly Installing Spyware?
A researcher caught Claude Desktop installing browser bridges silently. Plus the MCP RCE Anthropic won’t patch.
Anthropic Looks At Some Of Its Alignment Problems
Anthropic has given us its assessment of four ‘recent cybersecurity incidents’ involving Claude that happened during cybersecurity evaluations, three of which were previously known.
Will Anthropic stop boasting its “100% vibe coded” computer programs after sending DMCA notices seeking takedown of copies of leaked source code for Claude. Any “100% vibe-coded” program might not be copyrightable
Anthropic found itself in another controversy. But this one, unlike the dispute with the U.S. Department of War, was self-inflicted. On March 31, Anthropic inadvertently disseminated the entire sou…
Securing CI/CD in an agentic world: Claude Code Github action case | Microsoft Security Blog
Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to workflow secrets under specific conditions. This research examines the attack chain, responsible disclosure process, Anthropic's mitigation, and guidance for securing AI-powered CI/CD workflows.
