Backdoored Claude Code extension: what to check
Cursor's marketplace served tampered Claude Code 2.1.312 and 2.1.313, which plant an SSH key. Check your laptop, then rotate server keys from a clean machine.
#incident-response
Filtering by topic #incident-response · clear
What to Do If Your VPS Is Hacked
Your VPS is compromised. Isolate it at the provider firewall, snapshot the disk as evidence, rotate every key it held, then rebuild from a clean image.