A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...