BREAKINGتازہ ترینताज़ा खबर
Anthropic's compute costs eat a bigger share of revenue as growth surgesAnthropic's compute costs eat a bigger share of revenue as growth surgesAnthropic's compute costs eat a bigger share of revenue as growth surgesStartup plans 50,000 space mirrors to beam sunlight down at nightStartup plans 50,000 space mirrors to beam sunlight down at nightStartup plans 50,000 space mirrors to beam sunlight down at nightChina steps up Middle East diplomacy as fears grow of a renewed US-Iran warChina steps up Middle East diplomacy as fears grow of a renewed US-Iran warChina steps up Middle East diplomacy as fears grow of a renewed US-Iran warTrump makes his last pitch to voters on Election DayTrump makes his last pitch to voters on Election DayTrump makes his last pitch to voters on Election DayDisney expected to lay off thousands in its biggest round of cuts this yearDisney expected to lay off thousands in its biggest round of cuts this yearDisney expected to lay off thousands in its biggest round of cuts this yearAckman warns speculative trading is turning the stock market into a casinoAckman warns speculative trading is turning the stock market into a casinoAckman warns speculative trading is turning the stock market into a casinoRedMagic takes its RGB liquid-cooled gaming phone global as the 12 ProRedMagic takes its RGB liquid-cooled gaming phone global as the 12 ProRedMagic takes its RGB liquid-cooled gaming phone global as the 12 ProMalachi Jordan commits to St. John's, its first five-star recruit in 13 yearsMalachi Jordan commits to St. John's, its first five-star recruit in 13 yearsMalachi Jordan commits to St. John's, its first five-star recruit in 13 yearsSigns point to a big BioWare N7 Day celebration planned before the studio closedSigns point to a big BioWare N7 Day celebration planned before the studio closedSigns point to a big BioWare N7 Day celebration planned before the studio closedCritics of Ilhan Omar describe threats and intimidation, report saysCritics of Ilhan Omar describe threats and intimidation, report saysCritics of Ilhan Omar describe threats and intimidation, report saysGoogle app may replace its bottom bar tabs with Videos, Images and YouGoogle app may replace its bottom bar tabs with Videos, Images and YouGoogle app may replace its bottom bar tabs with Videos, Images and YouStar Wars Jedi: Survivor's final hidden secret found after three and a half yearsStar Wars Jedi: Survivor's final hidden secret found after three and a half yearsStar Wars Jedi: Survivor's final hidden secret found after three and a half yearsWar widens in the Black Sea, testing NATO's red linesWar widens in the Black Sea, testing NATO's red linesWar widens in the Black Sea, testing NATO's red linesGoogle confirms Android Family Hub, a new family space inside SettingsGoogle confirms Android Family Hub, a new family space inside SettingsGoogle confirms Android Family Hub, a new family space inside SettingsFive rescued off Kiribati after three months adrift at sea, four still missingFive rescued off Kiribati after three months adrift at sea, four still missingFive rescued off Kiribati after three months adrift at sea, four still missingDeath toll reaches 31 after Russian strikes hit a Ukrainian aid siteDeath toll reaches 31 after Russian strikes hit a Ukrainian aid siteDeath toll reaches 31 after Russian strikes hit a Ukrainian aid siteKing calls the slave trade a shameful chapter in Commonwealth addressKing calls the slave trade a shameful chapter in Commonwealth addressKing calls the slave trade a shameful chapter in Commonwealth addressScientists spot a potentially massive dwarf planet candidate beyond PlutoScientists spot a potentially massive dwarf planet candidate beyond PlutoScientists spot a potentially massive dwarf planet candidate beyond PlutoEating blueberries every day may ease depressive symptoms in older adultsEating blueberries every day may ease depressive symptoms in older adultsEating blueberries every day may ease depressive symptoms in older adultsIran warns of a 'new battlefield' after reported US strike on QeshmIran warns of a 'new battlefield' after reported US strike on QeshmIran warns of a 'new battlefield' after reported US strike on QeshmAnthropic's compute costs eat a bigger share of revenue as growth surgesAnthropic's compute costs eat a bigger share of revenue as growth surgesAnthropic's compute costs eat a bigger share of revenue as growth surgesStartup plans 50,000 space mirrors to beam sunlight down at nightStartup plans 50,000 space mirrors to beam sunlight down at nightStartup plans 50,000 space mirrors to beam sunlight down at nightChina steps up Middle East diplomacy as fears grow of a renewed US-Iran warChina steps up Middle East diplomacy as fears grow of a renewed US-Iran warChina steps up Middle East diplomacy as fears grow of a renewed US-Iran warTrump makes his last pitch to voters on Election DayTrump makes his last pitch to voters on Election DayTrump makes his last pitch to voters on Election DayDisney expected to lay off thousands in its biggest round of cuts this yearDisney expected to lay off thousands in its biggest round of cuts this yearDisney expected to lay off thousands in its biggest round of cuts this yearAckman warns speculative trading is turning the stock market into a casinoAckman warns speculative trading is turning the stock market into a casinoAckman warns speculative trading is turning the stock market into a casinoRedMagic takes its RGB liquid-cooled gaming phone global as the 12 ProRedMagic takes its RGB liquid-cooled gaming phone global as the 12 ProRedMagic takes its RGB liquid-cooled gaming phone global as the 12 ProMalachi Jordan commits to St. John's, its first five-star recruit in 13 yearsMalachi Jordan commits to St. John's, its first five-star recruit in 13 yearsMalachi Jordan commits to St. John's, its first five-star recruit in 13 yearsSigns point to a big BioWare N7 Day celebration planned before the studio closedSigns point to a big BioWare N7 Day celebration planned before the studio closedSigns point to a big BioWare N7 Day celebration planned before the studio closedCritics of Ilhan Omar describe threats and intimidation, report saysCritics of Ilhan Omar describe threats and intimidation, report saysCritics of Ilhan Omar describe threats and intimidation, report saysGoogle app may replace its bottom bar tabs with Videos, Images and YouGoogle app may replace its bottom bar tabs with Videos, Images and YouGoogle app may replace its bottom bar tabs with Videos, Images and YouStar Wars Jedi: Survivor's final hidden secret found after three and a half yearsStar Wars Jedi: Survivor's final hidden secret found after three and a half yearsStar Wars Jedi: Survivor's final hidden secret found after three and a half yearsWar widens in the Black Sea, testing NATO's red linesWar widens in the Black Sea, testing NATO's red linesWar widens in the Black Sea, testing NATO's red linesGoogle confirms Android Family Hub, a new family space inside SettingsGoogle confirms Android Family Hub, a new family space inside SettingsGoogle confirms Android Family Hub, a new family space inside SettingsFive rescued off Kiribati after three months adrift at sea, four still missingFive rescued off Kiribati after three months adrift at sea, four still missingFive rescued off Kiribati after three months adrift at sea, four still missingDeath toll reaches 31 after Russian strikes hit a Ukrainian aid siteDeath toll reaches 31 after Russian strikes hit a Ukrainian aid siteDeath toll reaches 31 after Russian strikes hit a Ukrainian aid siteKing calls the slave trade a shameful chapter in Commonwealth addressKing calls the slave trade a shameful chapter in Commonwealth addressKing calls the slave trade a shameful chapter in Commonwealth addressScientists spot a potentially massive dwarf planet candidate beyond PlutoScientists spot a potentially massive dwarf planet candidate beyond PlutoScientists spot a potentially massive dwarf planet candidate beyond PlutoEating blueberries every day may ease depressive symptoms in older adultsEating blueberries every day may ease depressive symptoms in older adultsEating blueberries every day may ease depressive symptoms in older adultsIran warns of a 'new battlefield' after reported US strike on QeshmIran warns of a 'new battlefield' after reported US strike on QeshmIran warns of a 'new battlefield' after reported US strike on Qeshm
Advertisement
Text size:
USA • 2026-11-02, 08:26 ET • ~1 min read

Fake Claude Code extension in Cursor marketplace tried to plant SSH backdoor on developers' machines

کرسر مارکیٹ پلیس میں جعلی کلاؤڈ کوڈ ایکسٹینشن نے ڈویلپرز کی مشینوں پر خفیہ رسائی کی کوشش کی

कर्सर मार्केटप्लेस में नकली क्लॉड कोड एक्सटेंशन ने डेवलपर्स की मशीनों पर गुप्त पहुंच बनाने की कोशिश की

Fake Claude Code extension in Cursor marketplace tried to plant SSH backdoor on developers' machines

Key points

اہم نکات

मुख्य बातें

  • A tampered version of Anthropic's Claude Code extension was offered through Cursor's extension marketplace for about 11 hours on 29 October, and up to 5,000 developers may have received it.
  • The malicious versions, 2.1.312 and 2.1.313 for Windows and macOS, tried to add an attacker-controlled SSH key, turn on local SSH access and open a reverse tunnel to an outside server, while also collecting basic system details.
  • Cursor removed the versions and temporarily shut its marketplace, and Anthropic clarified that it did not build the malicious versions and that its own systems and official channels were not affected.
  • 29 اکتوبر کو کرسر کی ایکسٹینشن مارکیٹ پلیس پر اینتھروپک کی کلاؤڈ کوڈ ایکسٹینشن کا تبدیل شدہ ورژن تقریباً 11 گھنٹے تک دستیاب رہا، اور 5,000 تک ڈویلپرز اسے حاصل کر چکے ہوں گے۔ ونڈوز اور میک کے لیے بدنیتی پر مبنی ورژن 2.1.312 اور 2.1.313 نے حملہ آور کی ایس ایس ایچ چابی شامل کرنے، مقامی ایس ایس ایچ رسائی کھولنے اور بیرونی سرور سے رابطہ بنانے کی کوشش کی، اور سسٹم کی بنیادی معلومات بھی جمع کیں۔ کرسر نے یہ ورژن ہٹا دیے اور عارضی طور پر مارکیٹ پلیس بند کر دی، جبکہ اینتھروپک نے وضاحت کی کہ اس نے یہ بدنیتی ورژن نہیں بنائے اور اس کے اپنے سسٹم اور سرکاری چینلز متاثر نہیں ہوئے۔ 29 اکتوبر کو کرسر کے ذریعے یہ ایکسٹینشن انسٹال کرنے والے ڈویلپرز کو svc-telemetry نامی مشکوک ایس ایس ایچ چابی چیک کرنے، متاثرہ مشینیں الگ کرنے اور پاس ورڈز و چابیاں بدلنے کا مشورہ دیا گیا ہے۔
  • 29 अक्टूबर को कर्सर के एक्सटेंशन मार्केटप्लेस पर एंथ्रॉपिक के क्लॉड कोड एक्सटेंशन का छेड़छाड़ किया गया संस्करण लगभग 11 घंटे तक उपलब्ध रहा, और 5,000 तक डेवलपर्स इसे प्राप्त कर चुके होंगे। विंडोज़ और मैक के लिए दुर्भावनापूर्ण संस्करण 2.1.312 और 2.1.313 ने हमलावर की एसएसएच कुंजी जोड़ने, स्थानीय एसएसएच पहुंच चालू करने और बाहरी सर्वर से उल्टा सुरंग खोलने की कोशिश की, साथ ही सिस्टम की बुनियादी जानकारी भी जुटाई। कर्सर ने ये संस्करण हटा दिए और अस्थायी रूप से मार्केटप्लेस बंद कर दिया, जबकि एंथ्रॉपिक ने स्पष्ट किया कि उसने ये दुर्भावनापूर्ण संस्करण नहीं बनाए और उसके अपने सिस्टम व आधिकारिक चैनल प्रभावित नहीं हुए। 29 अक्टूबर को कर्सर के ज़रिए यह एक्सटेंशन इंस्टॉल करने वाले डेवलपर्स को svc-telemetry नाम की संदिग्ध एसएसएच कुंजी जांचने, प्रभावित मशीनें अलग करने और पासवर्ड व कुंजियाँ बदलने की सलाह दी गई है।

A tampered version of Anthropic's Claude Code extension was offered through Cursor's extension marketplace for about 11 hours on 29 October, and up to 5,000 developers may have received it. The malicious versions, 2.1.312 and 2.1.313 for Windows and macOS, tried to add an attacker-controlled SSH key, turn on local SSH access and open a reverse tunnel to an outside server, while also collecting basic system details. Cursor removed the versions and temporarily shut its marketplace, and Anthropic clarified that it did not build the malicious versions and that its own systems and official channels were not affected. Developers who installed the extension through Cursor on 29 October are advised to check for a suspicious SSH key labelled svc-telemetry, isolate affected machines and rotate passwords and keys.

29 اکتوبر کو کرسر کی ایکسٹینشن مارکیٹ پلیس پر اینتھروپک کی کلاؤڈ کوڈ ایکسٹینشن کا تبدیل شدہ ورژن تقریباً 11 گھنٹے تک دستیاب رہا، اور 5,000 تک ڈویلپرز اسے حاصل کر چکے ہوں گے۔ ونڈوز اور میک کے لیے بدنیتی پر مبنی ورژن 2.1.312 اور 2.1.313 نے حملہ آور کی ایس ایس ایچ چابی شامل کرنے، مقامی ایس ایس ایچ رسائی کھولنے اور بیرونی سرور سے رابطہ بنانے کی کوشش کی، اور سسٹم کی بنیادی معلومات بھی جمع کیں۔ کرسر نے یہ ورژن ہٹا دیے اور عارضی طور پر مارکیٹ پلیس بند کر دی، جبکہ اینتھروپک نے وضاحت کی کہ اس نے یہ بدنیتی ورژن نہیں بنائے اور اس کے اپنے سسٹم اور سرکاری چینلز متاثر نہیں ہوئے۔ 29 اکتوبر کو کرسر کے ذریعے یہ ایکسٹینشن انسٹال کرنے والے ڈویلپرز کو svc-telemetry نامی مشکوک ایس ایس ایچ چابی چیک کرنے، متاثرہ مشینیں الگ کرنے اور پاس ورڈز و چابیاں بدلنے کا مشورہ دیا گیا ہے۔

29 अक्टूबर को कर्सर के एक्सटेंशन मार्केटप्लेस पर एंथ्रॉपिक के क्लॉड कोड एक्सटेंशन का छेड़छाड़ किया गया संस्करण लगभग 11 घंटे तक उपलब्ध रहा, और 5,000 तक डेवलपर्स इसे प्राप्त कर चुके होंगे। विंडोज़ और मैक के लिए दुर्भावनापूर्ण संस्करण 2.1.312 और 2.1.313 ने हमलावर की एसएसएच कुंजी जोड़ने, स्थानीय एसएसएच पहुंच चालू करने और बाहरी सर्वर से उल्टा सुरंग खोलने की कोशिश की, साथ ही सिस्टम की बुनियादी जानकारी भी जुटाई। कर्सर ने ये संस्करण हटा दिए और अस्थायी रूप से मार्केटप्लेस बंद कर दिया, जबकि एंथ्रॉपिक ने स्पष्ट किया कि उसने ये दुर्भावनापूर्ण संस्करण नहीं बनाए और उसके अपने सिस्टम व आधिकारिक चैनल प्रभावित नहीं हुए। 29 अक्टूबर को कर्सर के ज़रिए यह एक्सटेंशन इंस्टॉल करने वाले डेवलपर्स को svc-telemetry नाम की संदिग्ध एसएसएच कुंजी जांचने, प्रभावित मशीनें अलग करने और पासवर्ड व कुंजियाँ बदलने की सलाह दी गई है।

Read Full News → Back to all news

Related stories

متعلقہ خبریں

संबंधित खबरें

Most read

سب سے زیادہ پڑھی گئی

सबसे ज़्यादा पढ़ी गई

  1. Loading...
Advertisement