Search — “sysmon.cmd”

Tampered anthropic.claude-code versions 2.1.312 and 2.1.313 were served by the Cursor extension marketplace for about 11 hours on Oct 29, 2026, exposing up to 5,000 developers. An injected JavaScript loader in extension.js collects host recon (Git email, env-var names matching KEY/TOKEN/SECRET), appends an svc-telemetry SSH key to authorized_keys, tries to enable SSH, opens a reverse tunnel (-N -R '*:0:localhost:22') to 134.209.82.225, and persists via LaunchAgent com.apple.sysmond, @reboot cron, or SysMon scheduled task/Startup sysmon.cmd. Coding errors likely blocked remote access on many macOS/Windows hosts, but keys and persistence may still be written; hunt for the svc-telemetry key, .smt/.smtk/.stk_ files, ssh/autossh child processes of Cursor, and connections to the C2.