Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Cursor extension marketplace
developer tools · Global
What happened
Developer machines that loaded the build: loader attempted to add an attacker SSH key, enable SSH, open a reverse tunnel and persist; recon included names of credential environment variables.
Up to 5,000 developers exposed; coding errors likely broke the backdoor on many machines.
What remains unknown
- How the build reached the marketplace under Anthropic's name
- Machines with working backdoors
Losses: unknown
Capital around this company
DFX holds no verified lender or owner record for this organization yet. That is a gap in our coverage, not evidence that none exists.
Sources
Does Cursor extension marketplace touch your portfolio?
We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.