- Cursor confirmed Supply-chain
This is a dev post classified by AGK Intelligence as Security (news), kept by the Dev Radar because it carries real work, not commentary.
- Cursor confirmed Supply-chain attacks just hit AI coding tools. - Cursor found a bad Claude Code extension in its marketplace. - The fake version attempted to install an SSH backdoor, steal host details, and establish persistent remote access. - Not from Anthropic. - Marketplace was taken down and cleaned. - If you used Claude Code in Cursor recently, update immediately to 2.1.314.
Posted by Md Ismail Šojal 🕷️ (64.1k followers) 11 h ago · 65 likes · 10.6k views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: Cursor Marketplace.
More dev work like this
- CVE-2024-21413: MonikerLink Outlook Vulnerability PoC — @DarkWebInformer
- CrowdStrike President Michael Sentonas joined Sascha Roehrer on deeptech INSIGHTS to… — @CrowdStrike
- I just shared this with my family, and you all should do it too. — @JJEnglert
- Securing AI shouldn't add complexity. — @PaloAltoNtwks
- Standing room only at the Boston Kubernetes Meetup last night for Teleport’s Paul Curtis… — @goteleport
- AI adoption is accelerating. Stopping emerging AI threats takes elite expertise. — @CrowdStrike
- Names, emails, API keys—Our ambassador @povedaai is putting MiniCPM4-0.5B to work… — @OpenBMB
- Finding vulnerabilities is one thing. Preventing them from being merged is another. 🔐 — @gitlab
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-30 20:27 UTC. Full method.