A tampered Claude Code extension was live on the Cursor marketplace for roughly 11 hours, reaching up to 5,000 users. The extension attempted to steal user data and establish remote access. Cursor took the entire marketplace offline and reinstated it after confirming no further risk remained.
It gives developers using AI coding extensions a concrete supply-chain warning and a real incident to check their own installs against.
A tampered Claude Code extension was live on the Cursor marketplace for about 11 hours, affecting up to 5,000 users. It tried to steal user data and set up remote access. Cursor took the entire marketplace offline and reinstated it after confirming there was no further risk.
The article Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft appeared first on The Decoder.
Comments & Questions (0)
No comments yet
Be the first to comment!