The most useful tool in a developer’s editor is also the most trusted, which is exactly why it makes a good disguise. On Wednesday a build of Anthropic’s Claude Code extension, version 2.1.313, appeared on the Cursor marketplace under the real extension ID. According to The Hacker News, a 66-line loader was bolted onto the front of the genuine bundle. It planted an SSH key labelled “svc-telemetry”, set up persistence, opened a reverse tunnel, and shipped host details to an attacker’s server. Cursor says up to 5,000 users installed it before it was pulled; Anthropic’s clean 2.1.314 is out. Cursor says the build was not developed by Anthropic. How it got onto the marketplace is still unexplained, and early reports wrongly blamed Open VSX, so treat the details as moving. The lesson isn’t new, but it’s sharper with agents: the extension already has your keys and your shell, and the attacker only has to borrow its name.
Meanwhile the defenders just got a bigger toy. Mistral has published the weights of Large 4, a roughly one-trillion-parameter mixture-of-experts model pitched squarely at cybersecurity. Mistral’s argument is that organizations get more control over their defences by running an open model than by renting a closed one, and its own page admits that live traffic showed “potential for uplift to conduct real attacks”. That is a candid line to ship next to a trillion open parameters. The benchmarks are Mistral’s own, so hold the leaderboard claims loosely. Put the two stories side by side and you get the week’s quiet question: which is the bigger risk, the powerful model or the trusted plugin?
The money, as ever, is going to concrete. Thrive Holdings, backed by OpenAI, is buying ADT for $10 a share, a $15.3 billion enterprise value, with the plan of renovating old-line businesses with AI and forward-deployed engineers. No new product has been named yet, so this is a thesis rather than a launch. At the other end of the stack, Runware wants to build AI data centers on an assembly line, with pods brought online in 48 hours and a target of 30 MW a day by 2028. TechCrunch itself notes the EV startup Arrival as the cautionary tale for factory-built ambition. Amazon’s number puts the scale in context: around $220 billion of capex this year.
Finally, a platform bends to the machines it feeds. Reddit says it is moving to a logged-in experience as search referrals fell by more than a million a week in October. US daily users slid to 50.7 million, and Reddit warned of a low-double-digit drop in users next quarter. Revenue still rose 53% to $895 million. The open web is being closed off, partly to protect data that AI companies pay to license.
