Fake Claude Code extension backdoored up to 5,000 Cursor users

A fake copy of the Claude Code VS Code extension, posing as Anthropic's real package, sat live on Cursor's own extension marketplace (Cursor is a VS Code fork with its own extension store) for about 11 hours on October 29: 2:27am to 1:35pm Pacific. Cursor says the fake version "was not developed by Anthropic" and finds "no evidence that other versions of the extension or the official distribution are affected." At most 5,000 users who installed or updated to version 2.1.313 in that window are considered potentially affected. The payload tried to plant an attacker's SSH key, open a reverse SSH tunnel, and install persistence, reporting to a server Cursor says is now offline. Cursor shut its marketplace down "out of an abundance of caution" and warns that uninstalling the extension alone won't remove the backdoor. Check for a planted key. Rotate credentials from a clean machine.

Herdr ships a native desktop app for Claude Code, Codex agents

Herdr, a coding-agent manager, released a native desktop app for Claude Code, Codex and other agents. On a 248-point Hacker News thread, one longtime tmux user called it "wonderful," and another said it has been "absolutely rock solid" alongside Codex. One commenter says it sometimes can't see running Claude Code sessions, and the site had a certificate error as of this thread. Herdr names no company. No business model, no release date either.

Anthropic launches a Usage and Cost Analytics API for Claude Platform spend

Anthropic's Claude Platform launched the Usage and Cost Analytics API in beta: endpoints that report token usage and cost for Claude Console and Claude Enterprise organizations, filterable by model, workspace, API key, or the user behind each request. The same notes mark the older Usage and Cost API, plus four Claude Enterprise Analytics API endpoints, "legacy" — still supported, none removed. It's read access to spend, not a billing change. Nothing here changes what anyone pays.

Stack Overflow answers decline claims with its own survey and an agent-beta chart

Days after a Hacker News thread claimed Stack Overflow gets fewer than 1,000 questions a month, SVP Philippe Beaudette answered: predictions like that "confuse a change in how people access knowledge with the disappearance of the knowledge." His numbers: a 2026 survey where 64% of respondents visit less often for simple questions, and a chart showing Stack Overflow for Agents beta posts growing from 665 in June to 22,011 by October. Site traffic itself isn't in the post. The pivot pitch is.

Know someone who'd want this in their inbox? Forward it — that's how this grows. And if we got something wrong, or you think we buried the real story today, hit reply. A person reads every one.

The New Way is written with AI. It gathers the day's stories, checks them against their sources and drafts every summary. A person decides what runs and reviews every issue before we hit send.

Fake Claude Code extension backdoored up to 5,000 Cursor users

What changed this week