I would have loved to know that this was for CURSOR and not VISUAL STUDIO CODE before I spent 2 hours resetting all my API keys and getting ready to fully reimage a machine.

We're in trouble. Four of the top ten items on Hacker News are security breaches.

This puts an entirely new spin on Elon trolling Binance on Twitter.

P(doom) crowd say Anthropic has not zero chance to destroy humanity. What it is, the VS Code Extension Marketplace, including Cursor's, must be bigger.

More details from Kevin Beaumont. "Anthropic got compromised. Their Claude Code extension on Visual Studio Code and Cursor has malware in it, which creates a remote access Trojan to desktops. " https://cyberplace.social/@GossiTheDog/117528831681803563

Something very similar is true for ChatGPT on macOS. I was recently very surprised to learn that starting a "Work" conversation on my Mac would grant the agent session file system access which can later be used remotely, e.g. from a browser session logged into the same account on a different computer.

Given how many people likely share ChatGPT subscriptions, this seems highly problematic.

Why is this not trending on Twitter

This is just the version of extension on the Cursor marketplace, not the one on the VS Code marketplace, right?

Have we just witnessed the greatest lateral movement in cybersecurity history? https://x.com/dinodaizovi/status/2116125553665458463?a=D1DiF...