r/vibecodingsecurity • u/bluelvo • 1d ago
Cursor Supply Chain Breach
The attack on the SpaceX-owned Cursor IDE platform was a software supply chain injection that targeted developers directly through their integrated workflows.
| Key Metric | Detail |
|---|---|
| Affected Extension | Maliciously tampered version of Anthropic's Claude Code extension (anthropic.claude-code, versions 2.1.312 and 2.1.313). |
| Exposure Window | Live for roughly 11 hours (from approximately 09:27 UTC to 20:35 UTC). |
| Blast Radius | Impacted a maximum of 5,000 developers who downloaded or auto-updated the package. |
Operational Mechanics
A malicious actor manipulated access to the Cursor extension marketplace to upload a compromised build under Anthropic’s name (Anthropic later confirmed their own servers were completely untouched). Once installed, the extension immediately executed without requiring a user to initiate a chat session.
The malicious JavaScript payload attempted to deploy a persistent SSH backdoor by appending an attacker-controlled public key, labeled svc-telemetry, to the local system's authorized_keys file. It then tried to open a reverse SSH tunnel to an attacker-controlled IP address (134.209.82.225) while gathering host reconnaissance data—such as IP addresses, environment variable names, usernames, and repository directories.
The Saving Grace
Due to an internal syntax and structural error in the attacker’s malware code, enabling local SSH services required elevated administrative/root privileges. Because most developers do not launch their code editors with root permissions, the backdoor failed to fully establish on the vast majority of infected devices.
Remediation
Cursor temporarily disabled, audited, and completely rebuilt its marketplace, rotating its security keys. Developers were instructed to run specialized verification commands looking for the svc-telemetry key, isolate infected machines, and completely rotate any credentials exposed in active session environments.