Comment by helsinkiandrew
1 day ago
> Yesterday, Anthropic were compromised and Cursor extension used by tens of millions of developers for Claude access was delivering a remote access trojan via an SSH reverse backdoor
That's a bit hyperbolic: someone released a version of the Claude Code VS Code extension with a backdoor on the Cursor marketplace:
> a maliciously modified version of Anthropic’s Claude Code extension was made available in the Cursor VS Code extension Marketplace
https://cursor.com/blog/claude-code-extension-security-notic...
[flagged]
[flagged]
No the version was skipped. 2.1.314 was published instead. Issue is with Cursor marketplace nothing else.
I wish I was schizophrenic enough to come up with conspiracies this interesting.
[flagged]
Direct link to Binance assertions you mentioned [0]
The Binance post should probably be the root link for this topic not this blog post - IMO
[0] https://www.binance.com/en/square/post/10-30-2026-claude-cod...
That Binance post seems to not exist anymore - I get redirected to their homepage. Also doesn’t seem to be in the wayback machine.
Edit: found an archived copy: https://archive.is/AND7z
1 reply →
Wasn’t it called Cursor Marketplace pre-Elon?
Cursor always used OpenVSX for VSCode extensions. There is separate "Cursor Marketplace" (https://cursor.com/marketplace) but it installs "Cursor Plugins" which are exclusively Cursor feature not related to VSCode, and Anthropic had never released a "Cursor Plugin"
3 replies →
From "I suspect it was Anthropic" to "Nah it was anthropic", it's amazing how disinformation spreads... when even your source says:
> but it is unclear whether his account or another part of the publishing process was compromised.
God, people get so conspiratorial on HN when it comes to Ant