Security Affairs newsletters flag malicious Claude Code extension, Trezor implant warning and AI-driven attacks
MALWAREAnthropicredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
The malware digest reports a malicious Anthropic.claude-code version 2.1.313 identified in the Cursor Extension Marketplace, and Trezor's warning about a suspected crypto-theft implant in a hardware wallet. Other items cover the uCreator Android spyware platform, the Lazarus-linked Operation FlashHole, and a returning Load/Mine campaign on Hugging Face. Defenders should check for that extension version and review hardware wallet advisories. No CVE identifiers are given in the articles.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether the malicious Anthropic.claude-code version 2.1.313 is installed from the Cursor Extension Marketplace and remove it if found.
- Review Trezor's warning about a suspected crypto-theft implant if you use that hardware wallet.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 1 outlet
Security Affairs
Who and what is in it
Products