October 2026 Summaries

Cursor reported that a malicious, unauthorized build of the Anthropic Claude Code extension, version 2.1.313, was available in its VS Code extension Marketplace between 2:27 a.m. and 1:35 p.m. PT on October 29, 2026, potentially affecting up to 5,000 users. The package gathered system and user details, added an attacker-controlled SSH key, attempted to enable SSH and establish a persistent reverse tunnel, and sent host information to an attacker-operated server, although administrative-permission requirements and coding errors meant the most serious access attempts would usually fail. Cursor removed the extension, temporarily shut down and rebuilt the marketplace, audited other extensions, rotated keys, and coordinated with the hosting provider to disable the attacker’s server. Users who installed or updated the affected version are advised to check for the “svc-telemetry” SSH key and other indicators, isolate affected devices, remove persistence mechanisms and tunnel processes using provided remediation scripts, and rotate credentials and sessions because uninstalling the extension alone may not remove standalone malicious components.

Cursor has released the generally available Agent SDK, a framework for building, testing, and deploying code-defined software agents that automate recurring development tasks such as pull-request reviews, compliance workflows, and incident investigations. The SDK enables teams to tailor agents to their own processes, connect them to events from platforms including GitHub, GitLab, and Bitbucket, and encode policies that can be version-controlled and reviewed alongside application code. Agents can use specialized subagents, parallelize work, and rely on built-in evaluations and event replay to validate critical workflows, with examples including Cursor’s knowledge-base pull-request reviewer and the PGA Tour’s software development factory. Agent projects organize prompts in Markdown, tools as TypeScript functions, external integrations, and tests in a small software-project structure, and can be deployed to Cursor’s infrastructure through a single command or run independently as containerized Node processes.

Navan reports that using Cursor’s Cloud Agents reduced a Spring Boot 4 migration involving eight applications and 15 libraries from a historically month-long effort to about one week, while allowing development to continue. Engineers planned the work centrally and ran parallel agents on self-hosted machines, where the agents used internal tools, accessed systems such as Snowflake and Slack, and verified changes through browser-based workflows. The approach has expanded to roughly 200 active users at Navan and is also being applied to product development, where agents help generate workflow prompts, investigate unfamiliar codebases, and support engineers taking on broader full-stack responsibilities. Navan emphasizes that agents accelerate planning, coding, testing, and investigation, but engineers retain responsibility for reviewing assumptions, validating complex changes in staging, and approving final merges.