20261102 - Claude Code official Cursor extension gets malware back door

Signing official extensions is not fast moving enough https://pivot-to-ai.com/2026/11/02/claude-code-official-cursor-extension-gets-malware-back-door/ - blog post Patreon: https://www.patreon.com/davidgerard Ko-Fi: https://ko-fi.com/A1529D5 Buy us nice useful things (if not in the UK, set your own delivery postcode to SW1A 0AA): https://www.amazon.co.uk/hz/wishlist/ls/3Q8VZW46J6DM6 Get an extremely cool Pivot to AI shirt or mug: https://pivot-to-ai.redbubble.com Send in your story tips and non-slop sponsorship offers: dgerard@gmail.com Social media: https://circumstances.run/@davidgerard https://bsky.app/profile/davidgerard.circumstances.run.ap.brid.gy Sources: Security notice — malicious version of Anthropic.claude-code (2.1.312 and 2.1.313) identified in the Cursor VS Code Extension Marketplace https://cursor.com/blog/claude-code-extension-security-notice Just to be clear: This did not involve a compromise of any Anthropic systems https://x.com/ddworken/status/2116178850032066572 Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer's laptop https://x.com/binance/status/2115993361517891592 Binance Accelerator Program: Full Stack Engineer (APAC Remote) https://www.binance.com/en-TR/careers/job?id=5002449101 I've confirmed Binance use Claude Code on Cursor with this extension https://cyberplace.social/@GossiTheDog/11752944007566218 Previously on Pivot to AI: Vibe-coded build system NX gets hacked, steals vibe-coders' crypto https://pivot-to-ai.com/2025/08/29/vibe-coded-build-system-nx-gets-hacked-steals-vibe-coders-crypto/ video: https://www.youtube.com/watch?v=vnFKkBBzpVg&list=UU9rJrMVgcXTfa8xuMnbhAEA Full Pivot to AI playlist: https://www.youtube.com/playlist?list=UU9rJrMVgcXTfa8xuMnbhAEA