Show HN: Cassandra – free tool to check if you got affected by the Cursor hack

Category: security

Tags: security, malware-scanner, incident-response, supply-chain, shell-script

Score: 5.0/10 (Innovation: 5, Technical: 4, Documentation: 7, Utility: 6)

Cassandra is a read-only shell/PowerShell script that scans a machine for indicators tied to a specific Claude Code extension backdoor (v2.1.312/2.1.313) distributed via Cursor, checking persistence mechanisms, SSH keys, tunnel files, and hashes of the extension itself. It offers deeper coverage than the vendor's single grep, plus a 'bad version was installed' verdict that catches cases an update has already masked. The landing page and per-OS check matrix are unusually thorough for a one-off incident tool.

Target audience: developers using Cursor/Claude Code, security-conscious devs, incident responders

Repository: https://ciphero.ai/cassandra/hn

View on Hacker News