Malicious Claude Code extension found on Cursor's marketplace
In brief
- A malicious Claude Code extension was published on Cursor's marketplace.
- It tried to steal data and set up remote access for 5,000 users.
- Cursor disabled then restored its marketplace after verification.
A tampered Claude Code extension was briefly available on Cursor's marketplace for about 11 hours, affecting up to 5,000 users. It attempted to steal data and set up remote access. Cursor took the entire marketplace offline and reinstated it after confirming no further risk according to the vendor.
What it changes for you
- CybersecurityAI marketplace publishers must tighten security controls to prevent the spread of malicious software.
This summary gives you the essentials. The full article, its figures and quotes are on The Decoder.
Read the original articleAI-generated summary of the source, checked by rules. How we write · Report an error