النتائج المتحققة

لا يوجد

التناقضات والقيود

• SUPERSEDED: Cursor confirmed malicious versions under the legitimate extension identifier were served from its marketplace and attempted host reconnaissance, SSH-key installation, reverse tunneling and persistence; containment/remediation actions were published.
• حد الدليل: Does not prove successful remote access or credential theft on every exposed host; exact publishing root cause remains unknown.
• SUPERSEDED: Microsoft independently confirmed the injected JavaScript chain and scoped the incident away from Microsoft Visual Studio Marketplace/npm; Anthropic confirmed its systems were not compromised.
• حد الدليل: Code capability/order does not prove every action succeeded; env-var names are not secret values; host prerequisites matter.
• SUPERSEDED: Sophos independently documented the malicious extension behavior and remediation need; its reported exposure estimate is retained only as exposure, while code errors are preserved as impact-limiting counterevidence.
• حد الدليل: Exposure estimate is not confirmed infection, successful remote access or credential-theft count.

المتابعة المفتوحة

لا يوجد

المصادر

1. Cursorhttps://cursor.com/blog/claude-code-extension-security-notice
2. Microsoft Security Researchhttps://www.microsoft.com/en-us/security/blog/2026/10/30/inside-malicious-claude-code-branded-cursor-extension-persistent-ssh-backdoor/
3. Sophos X-Opshttps://www.sophos.com/en-us/blog/malicious-claude-code-extension-distributed-through-cursor-marketplace