
Security
Anthropic confirmed a tampered Claude Code extension was published on Cursor's marketplace by a malicious actor, affecting up to 5,000 users before it was pulled.
Search
No phones and 4 stories for “supply chain attack”

Security
Anthropic confirmed a tampered Claude Code extension was published on Cursor's marketplace by a malicious actor, affecting up to 5,000 users before it was pulled.

Security
A tampered Claude Code extension was live on the Cursor Marketplace for about 11 hours, affecting up to 5,000 users. It tried to steal developer data and install an SSH backdoor.

Security
A compromised release of Zod, the TypeScript validation library used in thousands of projects, has developers auditing their dependencies. Here is what we know so far.

Security
Ledger has paused sales from reseller CryptoBillis after an unauthorized implant was found in a user's wallet, linked to over $86 million in crypto thefts.