supply chain attack

AI Tidbits | Claude / Anthropic | Claude API

Were 5,000 Developers Really Hacked? What Impact Has the Cursor Extension Poisoning Incident Actually Had So Far?
ByFourteen 2026年 11月 2日

Author’s note: This article examines what “up to 5,000 people affected” really means in the Cursor extension poisoning incident. It breaks down the attack chain, confirmed cases, the scope of API key risks, and steps you can take to check your own systems—so you can tell which claims are supported by evidence and which are…

Read More Were 5,000 Developers Really Hacked? What Impact Has the Cursor Extension Poisoning Incident Actually Had So Far?
AI Tidbits | Claude / Anthropic | Claude API

How Can 66 Lines of JavaScript Turn a Claude Code Plugin into an SSH Backdoor? All 6 Attack Stages Explained
ByFourteen 2026年 11月 2日

Author’s note: This article breaks down the malicious Claude Code extension found in Cursor’s extension marketplace. It explains how the 66-line loader is triggered, how two sets of SSH keys work with a reverse tunnel, which findings are confirmed and unconfirmed, and how developers can investigate. On October 29, 2026, a compromised anthropic.claude-code extension appeared…

Read More How Can 66 Lines of JavaScript Turn a Claude Code Plugin into an SSH Backdoor? All 6 Attack Stages Explained