(⁠◔⁠‿⁠◔⁠) Are you OK？✨ Thinking...http://tg.okhk.nethttp://tg.okhk.net/posts/11886http://tg.okhk.net/posts/11886Fri, 30 Oct 2026 08:35:52 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4949" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b><span class="post-title-source">🔴</span></b></i><span class="post-title-source"> Cursor 下载的 Claude Code 插件 2.1.313 版本包含后门。</span>请立即更新并清理系统环境。<br /><br />- 文章称 Visual Studio Marketplace 和 OpenVSX 的插件不受影响。<br />- Cursor 用户请升级至 2.1.314 版本，并检查 SSH 公钥登录白名单配置及其它可能受影响之处。<br />- 此后门会收集系统信息并添加名为 svc-telemetry 的公钥到 authorized_keys。<br />- Cursor 称攻击者服务器已被关停。 [1]<br /><br /><a href="https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor" target="_blank" rel="noopener" title="opensourcemalware.com/~">opensourcemalware.com/~</a><br /><br />1. <a href="https://cursor.com/cn/blog/claude-code-extension-security-notice" target="_blank" rel="noopener" title="cursor.com/~">cursor.com/~</a><br /><br /><a href="/search/result?q=%23Cursor" title="#Cursor">#Cursor</a> <a href="/search/result?q=%23Anthropic" title="#Anthropic">#Anthropic</a>