Cursor says a maliciously modified 2.1.313 was live from about 2:27am to 1:35pm PT on October 29 and that at most 5,000 users were affected. Per Cursor, the code collected hostname, username, home directory, environment variable names,…
In the News: October 30, 2026 (Extra)
A tampered Claude Code extension build (2.1.313) attempted to install an SSH backdoor via Cursor's marketplace; a 10-run test finds a harness lets a cheaper model match a pricier one.
Extra edition
Machine-readable
Download Markdown
Story
Tampered Claude Code extension tried to plant an SSH backdoor via Cursor's marketplace
Read story →
Story
A behavioral harness made a cheaper model as reliable as a flagship, for less per run
Jain had coding agents build the same Java backend service ten times per model, with and without a harness of contract specs, examples and deterministic test feedback, then scored every build against 178 external acceptance tests. GPT-6 Sol…