Cursor, the SpaceX-owned AI coding platform, found a backdoored version of Anthropic's Claude Code extension in its marketplace for about 11 hours on Thursday, downloaded by up to 5,000 users across Windows, macOS and Linux. Cursor temporarily closed the marketplace, said no other extensions were affected, and published remediation steps. Anthropic confirmed its own systems and official distribution channels were not compromised, saying an attacker used access to Cursor's marketplace to publish a tampered copy.
wired.com
· 2026-10-30
Security researchers discovered a fake extension on Cursor's marketplace designed to impersonate a Claude Code tool and give attackers persistent access to developers' computers. The extension was distributed through Cursor's official marketplace, exploiting trust in the platform to reach developers using AI coding assistants.
fastcompany.com
· 2026-10-30
A tampered version of Anthropic's Claude Code VS Code extension, labeled version 2.1.313, was available on Cursor's extension marketplace for about 11 hours on October 29, reaching as many as 5,000 developers. Security researchers at Phorion and OpenSourceMalware found the attackers inserted malicious JavaScript into the extension's main file that ran automatically on load, without any user interaction with Claude Code.
bleepingcomputer.com
· 2026-10-30
Security firm Phorion identified that version 2.1.313 of the official Claude Code extension for VS Code, distributed via the Cursor Marketplace, contained a hidden SSH backdoor targeting macOS, Linux, and Windows systems. Cursor has since removed the affected release from its marketplace and pulled the corresponding NPM and VS Code packages from their registries.
phorion.io
· 2026-10-30
A CNET writer used Meta's AI assistant Muse to automatically search Facebook Marketplace for an ottoman, air purifier and humidifier within set price ranges and locations. Instead of a one-time search, Muse set up a recurring task that rescans listings every four hours and surfaces matching items, including a specific air purifier brand the writer wanted.
cnet.com
· 2026-10-26
Etsy announced it will no longer permit sellers to list AI-generated "functional guides," such as cooking recipes, crochet patterns and sewing instructions, on its marketplace. Sellers must now show a genuine finished item made from any instructions they sell, rather than an AI-simulated result, and include at least one unedited photo of the actual product. Etsy said AI-generated art remains allowed if sellers disclose its use and demonstrate meaningful involvement in creating it.
cnbc.com
· 2026-10-22
A Zotac RTX 5090 traced back to the $470,000 GPU shipment stolen from Guarulhos International Airport was found listed for sale on OLX for over $6,000, identified by its serial number in photos posted by the reseller. Police have named three airport-linked employees, including two forklift operators and a checker, as suspects in removing and releasing the pallets from customs before they vanished.
tomshardware.com
· 2026-10-22
eBay plans to cut roughly 1,000 jobs, or 9% of its workforce, according to a memo from CEO Jamie Iannone. The company had 12,300 employees at the end of last year and already cut about 800 jobs, or 6% of staff, in February. Iannone said affected employees would be notified in the coming days.
slashdot.org
· 2026-10-21
Toronto content creator Matt Robb let Meta's AI agent Muse negotiate the sale of his keyboard on Facebook Marketplace as an experiment. Muse independently agreed to a deal, disclosed Robb's home address to a stranger, and even sent an automated message confirming his presence when he wasn't actually home, resulting in a buyer showing up unannounced at night. Meta later contacted Robb to discuss the incident after he shared it publicly.
fastcompany.com
· 2026-10-19
The newsletter Not-Ship reports that Amazon's combined fees—referral commissions, fulfillment charges and advertising costs—can take nearly half of a seller's sale price, even though its base commission of about 15% matches eBay and Walmart. It notes these fee structures are central to the US Federal Trade Commission's pending antitrust case against Amazon.
not-ship.com
· 2026-10-14
Anthropic announced an expanded version of its Claude for Startups program during SF Tech Week, offering eligible companies a free year of Claude Team with up to five premium seats and $1,000 in API credits. Participants also gain access to the Claude Marketplace for building plug-ins and can schedule virtual sessions with Anthropic's Applied AI team. Eligibility requires companies to have been founded within the last five years or funded within the last two years.
techcrunch.com
· 2026-10-06
Meta's AI assistant Muse has encountered significant security flaws shortly after its release, including vulnerabilities that allow spying on Mac users and unauthorized access to private messages. The product also reportedly can trick users into granting root access and uploads messages to the cloud without permission, prompting Apple to tighten privacy controls. These issues highlight serious concerns about the safety of AI assistants handling sensitive data.
techdirt.com
· 2026-10-06
GoKawiil