English(EN) A trojanized Claude Code extension (2.1.312/2.1.313), not built by Anthropic, sat in Cursor's marketplace for ~11h on Oct 29. It planted an "svc-telemetry" SSH

Cursor 市场上发现被木马化的 Claude Code 扩展

作者 PulseAugur 编辑部 · [2 个来源] · 2026-11-02 07:45

一个非 Anthropic 开发的恶意 Claude Code 扩展于 10 月 29 日在 Cursor 市场上架了约 11 小时。这个被木马化的扩展，版本号为 2.1.312 和 2.1.313，在受影响的系统上植入了“svc-telemetry”SSH 密钥，建立了持久性连接，并创建了反向隧道。建议已安装该扩展的用户清理其系统并轮换凭据。 AI

影响受损的 AI 驱动开发工具可能导致供应链攻击，影响软件完整性和用户安全。

排序理由该集群描述了一个影响特定工具的恶意软件组件，而非核心 AI 模型发布或研究。

在 Mastodon — mastodon.social 阅读 →

AI 生成摘要 · Google Gemini · 来自 2 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 0 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 该集群描述了一个影响特定工具的恶意软件组件，而非核心 AI 模型发布或研究。
Source corroboration: 2 independent sources; Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics: product, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: 1 days old; Coverage has settled into its steady-state source set.

完整方法见我们的编辑标准。

报道来源 [2]

Mastodon — mastodon.social TIER_1 English(EN) · burso · 2026-11-02 07:48

Ransomware leak sites, Oct 26–Nov 1: 275 claimed victims (+24% w/w) from 43 groups. The Gentlemen led with 50, all on Oct 31, then Qilin (45). US: 34% of claims

Ransomware leak sites, Oct 26–Nov 1: 275 claimed victims (+24% w/w) from 43 groups. The Gentlemen led with 50, all on Oct 31, then Qilin (45). US: 34% of claims. FBI seized Virtualine bulletproof hosting. Claims, not confirmed breaches. # Ransomware # ThreatIntel # CyberSecurity …
Mastodon — mastodon.social TIER_1 English(EN) · burso · 2026-11-02 07:45

A trojanized Claude Code extension (2.1.312/2.1.313), not built by Anthropic, sat in Cursor's marketplace for ~11h on Oct 29. It planted an "svc-telemetry" SSH

A trojanized Claude Code extension (2.1.312/2.1.313), not built by Anthropic, sat in Cursor's marketplace for ~11h on Oct 29. It planted an "svc-telemetry" SSH key, persistence and a reverse tunnel. Installed it? Clean up and rotate creds. # SupplyChain # DevSecurity # Malware # …

本文如何被排名

报道来源 [2]

Ransomware leak sites, Oct 26–Nov 1: 275 claimed victims (+24% w/w) from 43 groups. The Gentlemen led with 50, all on Oct 31, then Qilin (45). US: 34% of claims

A trojanized Claude Code extension (2.1.312/2.1.313), not built by Anthropic, sat in Cursor's marketplace for ~11h on Oct 29. It planted an "svc-telemetry" SSH

相关实体

相关话题