A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

What the coverage shows

Both outlets frame the story as a malicious compromise involving Claude Code on Cursor, but BleepingComputer gives the fuller account with the reported 11-hour distribution window, up to 5,000 developers exposed, and the backdoor detail. The Register is shorter and more cautious, saying only that Claudeshop points to a “malicious actor” in a targeted supply-chain attack on Cursor.

Written by Crossfiled from the 1 headlines and extracts below, not from the articles themselves. It describes how the outlets framed this, not what happened. Open any headline for a summary of that article.