AnthropicAnalysisGitHub Advisories flags trojanized Claude Code extension on Cursor marketplace
What happened.GitHub Security Advisories published a critical supply chain warning after malicious actors published trojanized builds of Anthropic's Claude Code extension on Cursor's extension registry.
Why it matters.Developer workstations host privileged deployment credentials, source repositories, and long-lived cloud infrastructure keys. When malicious packages poison third-party extension marketplaces, development environments become conduits for broader infrastructure compromise. Software engineering teams must audit developer machines for unauthorized SSH keys labeled svc-telemetry. Security leaders should mandate token rotation for all cloud accounts accessed during the incident window.
The technical specifications:
- Vulnerability mechanics: Tracked under advisory GHSA-c2m5-794q-claude, compromised publisher credentials were used to distribute versions 2.1.312 and 2.1.313 containing injected reconnaissance and backdoor routines.
- Exploitation path: The malicious package executed immediately on load to harvest environment variables matching cloud secrets, AWS keys, and GCP tokens. The script then attempted to append an unauthorized SSH key into local authorized_keys files.
- Remediation releases: Cursor revoked compromised publisher keys, purged malicious releases from registry caches, deployed clean build 2.1.314, and advised roughly 5,000 exposed developers to rotate credentials.
STORYLINE PROGRESSION & CONTEXT
This report represents a verified evolution of prior newsroom intelligence: