Cursor Says up to 5,000 Users Affected by Tampered Claude Code Extension
14 Articles
14 Articles
The company Cursor, recently acquired by SpaceX, announced the introduction of a full-scale version of the Claude Code extension from Anthropic on its VS Code editor marketplace. Potentially, the incident could cost up to 5000 users. The extension of the site will shake the system information and configure remote access for intruders. The live version was available for at least 11 hours, after which the company removed it and temporarily suspend…
Cursor says up to 5,000 users affected by tampered Claude Code extension
Cursor shuts down marketplace after malicious Claude Code extension hits 5,000 users, offers fix
Coding platform Cursor had to temporarily shut down its marketplace due to a malicious Claude Code extension. This extension, the company says, allowed a hacker to collect and send user data to the hacker.
In the marketplace of the Cursor development environment, an SSH backdoor was installed in the official Claude code extension.
On 29 October 2026, the extension shop of the code editor Cursor distributed a false update of Claude Code, the programming assistant of Anthropic. The trap was on-line a little over eleven hours, between 10h27 and 21h35 Paris time to be quite accurate. On 29 October 2026, the shop
Coverage Details
Bias Distribution
- 60% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
