A Claude Dispatch flaw let a browser extension escape the browser and run code on the OS through Claude Desktop, even on another computer. Dispatch is being retired, but the design flaw behind it runs through other parts of the Claude suite.
A malicious build of Anthropic's Claude Code VS Code extension, version 2.1.313, was served through Cursor's extension marketplace on October 29 and plants an SSH backdoor. How to check if you are exposed, what to remove and rotate, and what is still unknown. Updated as the incident develops.
Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop each built a browser into their AI assistant, then enriched it beyond what a normal browser allows. Those enrichments broke the browser threat model, letting a web page or a local file reach the machine behind it. Two issues remain unpatched.