🚨注意！Cursor 官方已确认扩展市场出现被篡改的 Claude Code 扩展（v2.1.313）！
This is a dev post classified by AGK Intelligence as Security (news), kept by the Dev Radar because it carries real work, not commentary.
🚨注意！Cursor 官方已确认扩展市场出现被篡改的 Claude Code 扩展（v2.1.313）！ 预计5000用户中招，非 Anthropic 官方版本。 核心危害： 🔹加载即植入 SSH 后门（公钥标记 svc-telemetry） 🔹收集主机信息 + 持久化（macOS/Windows） 🔹尝试反向隧道（多数情况下因权限失败，但痕迹已留下） 官方已下架、关市场审计、重建并恢复，攻击者服务器已下线。 如果你在10月29日前后装过/更新过 Claude Code： 1️⃣立刻更新到 2.1.314 2️⃣终端跑：grep svc-telemetry ~/.ssh/authorized_keys 3️⃣有命中就按官方博客清理 + 轮换密钥 AI 工具供应链安全正在成为新战场，开发者机器一旦被控，代码、凭证、仓库全暴露。 #Cursor #ClaudeCode #AI安全 #供应链攻击 #网络安全 #SSH后门 #DevSecOps #Dario
Posted by SuSu_酥酥👅 (25k followers) 10 h ago · 15 likes · 2k views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: Cursor Marketplace.
More dev work like this
- CVE-2024-21413: MonikerLink Outlook Vulnerability PoC — @DarkWebInformer
- CrowdStrike President Michael Sentonas joined Sascha Roehrer on deeptech INSIGHTS to… — @CrowdStrike
- I just shared this with my family, and you all should do it too. — @JJEnglert
- Securing AI shouldn't add complexity. — @PaloAltoNtwks
- Standing room only at the Boston Kubernetes Meetup last night for Teleport’s Paul Curtis… — @goteleport
- AI adoption is accelerating. Stopping emerging AI threats takes elite expertise. — @CrowdStrike
- Names, emails, API keys—Our ambassador @povedaai is putting MiniCPM4-0.5B to work… — @OpenBMB
- Finding vulnerabilities is one thing. Preventing them from being merged is another. 🔐 — @gitlab
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-30 20:27 UTC. Full method.