Tooling7d ago
Cursor marketplace served a tampered Claude Code 2.1.313 extension with an SSH backdoor, affecting at most 5,000 users
Cursor posted a security notice on X at 07:46 UTC on Oct 30: version 2.1.313 of Anthropic.claude-code in its VS Code extension marketplace was a maliciously modified build, not developed by Anthropic, available from about 2:27am to 1:35pm PT on Oct 29 and affecting at most 5,000 users. The payload collects host details, adds an attacker SSH key, tries to open a reverse SSH tunnel and installs persistence. Cursor pulled the version, shut down and rebuilt the marketplace, rotated keys and had the attacker server taken offline; it asks users to update Claude Code for VS Code to 2.1.314 and follow the check and cleanup steps in its blog post.
Tooling11d ago
X discussion: Zerodha CEO Nithin Kamath asks what traders are building with free Kite APIs and AI coding agents
On Oct 26, Zerodha founder and CEO Nithin Kamath asked on X how people are using Kite APIs with AI agents now that they are free, and what they have built. He said AI coding agents such as Claude Code and Codex have made it much easier for traders and investors to build their own tools without much coding experience, and that Zerodha is seeing more Kite API usage because of these agents. Within about 10 hours the post drew more than 2,200 likes, over 2,000 bookmarks and 200+ replies. This is an X discussion and the CEO's own view, not a new product launch.
Tooling8d ago
Symantec finds a grey-market relay that installs the real Codex and Claude Code CLIs, then turns off sandboxing and routes every request through its own servers
On Oct 29 Symantec's Threat Hunter Team disclosed an unauthorized AI relay seen at about a dozen organizations since early 2026, mostly in mainland China. Users install the genuine Codex or Claude Code CLI via npm, then run a one-line script from the reseller that rewrites ~/.codex/config.toml or ~/.claude/settings.json, points base_url at relay domains, swaps in relay-issued keys, sets the sandbox to danger-full-access and disables telemetry. Symantec says this is not a CLI vulnerability and it has seen no abuse so far.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.