Sunday, November 1, 2026

Claude Code

Reporting on Claude Code from Lazy Tensor.

Search this sectionA place, person or subject

Supply Chain & Vulnerability Intel

Malicious Claude Extension on Cursor, GitLab KEV & Trezor Warning

Up to 5,000 developers were exposed to an SSH backdoor loader in v2.1.313, CISA sets a Sunday deadline for GitLab CVE-2026-97229 across 2,800 exposed CE servers, and DOJ prosecutes North Korean and Syrian cyber actors.

Oct 30, 2026By Lazy Tensor4 min read

A cybersecurity researcher workstation displaying code diff inspection screens next to a disassembled hardware circuit board under a magnifying lamp — Cursor removed a trojanized Claude Code extension (v2.1.313) after an 11-hour window that exposed up to 5,000 developers, while CISA confirmed active exploitation of GitLab flaw CVE-2026-97229 and Trezor warned of a suspected Safe 5 hardware implant.

Cursor Claude Code GitLab