PulseAugur
中
实时 00:02:29
English(EN) Anthropic plugin breach puts 5.000 computers at risk

Anthropic Claude扩展后门暴露5000台开发人员电脑

Cursor开发平台的一款官方Anthropic Claude扩展的恶意版本在12小时内被分发,可能影响多达5000台电脑。受损版本为2.1.313,通过Anthropic的官方账户发布,并试图创建对用户设备的隐藏访问,从而实现远程控制。虽然Anthropic发布了修复版本,但他们和Cursor均未解释账户是如何被泄露的,也未发布公开警告。 AI

影响 AI工具中的安全漏洞可能会侵蚀信任,并导致对AI驱动的开发工具进行更严格的审查。

排序理由 该集群描述的是集成AI模型的第三方工具中的安全漏洞,而不是核心AI发布或研究。

在 dev.to — Anthropic tag 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →

Anthropic Claude扩展后门暴露5000台开发人员电脑

本文如何被排名

Signal score
32 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
该集群描述的是集成AI模型的第三方工具中的安全漏洞,而不是核心AI发布或研究。
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

报道来源 [1]

  1. dev.to — Anthropic tag TIER_1 English(EN) · Hacks.gr ·

    Anthropic插件泄露使5000台计算机面临风险

    <p>An official Claude extension distributed via Cursor's marketplace was backdoored for 12 hours, impacting up to 5,000 developers via malicious version 2.1.313 before version 2.1.314 was released.</p> <p>Researchers confirmed the supply-chain incident, while Anthropic has not ye…