Malicious Claude Code extensions in Cursor: check your developer machines
- Affects
- Anthropic.claude-code in Cursor's marketplace: 2.1.312 and 2.1.313
- Severity
- Critical impact on affected devices
Security Brief, page 2
Recent hacks, important CVEs, and the steps that reduce your exposure.
By Tornike@realtornikeoFollow the Security Brief
Add the feed to your RSS reader to receive new briefings.
Next.js security update: two code-execution risks and a Server Actions fix
- Affects
- Next.js Cache Components: 16.0.0 through 16.4.0; Next.js image optimization: 10.0.0 through 15.5.27; above 16.0.0 through 16.4.0; Next.js Server Actions: 13.0.0 through 15.5.27; 16.0.0 through 16.4.0
- Severity
- Critical: CVSS 9.5
CVE-2026-96889GHSA-673q-mjm6-r5xrGHSA-p3m5-59mp-jv5r
Original summaries from vendor advisories and security research, with links to the evidence. Each brief separates what happened, who is affected, and what to do next.