Safety & RulesTampered Claude Code extension in Cursor tried hidden SSH access
According to Microsoft, tampered versions of the extension in the Cursor marketplace tried to add an attacker's SSH key to the computer.
Source of truthmicrosoft.com/…/inside-malicious-claude…On October 29 Cursor reported that a tampered copy of the Claude Code extension (anthropic.claude-code, versions 2.1.312 and 2.1.313) was in its extension marketplace. According to Microsoft's analysis, the code tried to add the attacker's SSH key, open an SSH tunnel and persist on the system. Cursor says that, because of errors in the code, the connection failed on most macOS and Windows computers. Anthropic told Microsoft it did not build the package. It matters because uninstalling does not remove what has already been written to the computer.
Other sources: cursor.com/…/claude-code-extension-secu…
Related stories
Microsoft assesses AI adoption by North Korean hacker groups as high
According to Microsoft, two groups use ARTEX, an open-source agentic penetration testing tool.
Microsoft: Storm-0940 group automated attacks with AI agents
According to Microsoft, Storm-0940, which it assesses as China-state aligned, used the open-source ARTEX framework to automate attacks targeting hundreds of organizations; most of the targeting was not successful.