Vulnerabilities
Claude Code Extension Trojanized on Cursor Marketplace
Trojanized Claude Code extension on Cursor's marketplace pushed an SSH backdoor to 5,000 developers. Anthropic says its own systems weren't touched.
supply chain attack
CyberROI coverage tagged “supply chain attack”.
AI
LiteLLM 1.107.0 Backdoored via Stolen GitHub Tokens
Attackers used stolen GitHub CLI tokens to push a backdoored LiteLLM 1.107.0 to PyPI and Docker — the AI gateway's second supply chain breach in a year.