Malicious Claude Code Extension Delivered via Cursor Supply Chain Attack
Original headline: Malicious Claude Code Extension Served in Cursor Supply Chain Attack
A malicious Claude code extension was distributed through the supply chain of the Cursor development tool. The extension performed host reconnaissance and attempted to establish a reverse SSH tunnel.
Supply‑chain delivery of LLM‑based malicious extensions shows that even trusted developer tools can become vectors for sophisticated attacks.
Research angleHow does the presence of LLM‑based malicious extensions in software supply chains affect developers’ security awareness? — Protection Motivation Theory
Turn this security issue into a research project
HJITM works with researchers from study design through surveys, analysis and submission to international journals in generative AI and technology management. Bring us your research question.
This item is an AI-generated summary of reporting by SecurityWeek. Please check the original article for accuracy. Copyright in the original article belongs to SecurityWeek.