Malicious Claude Code extension appears in Cursor marketplace
Key point
A tampered Claude Code extension that attempted data theft and remote access was live on the Cursor marketplace for about 11 hours, potentially affecting up to 5,000 users.
A tampered Claude Code extension was live on the Cursor marketplace for approximately 11 hours. The extension attempted to steal user data and establish remote access.
In response, Cursor took the entire marketplace offline. The marketplace was reinstated after the company confirmed there was no further risk. Up to 5,000 users were potentially affected.
This item is a summary. The full, checkable version is at the original source:
Read the original at The Decoder ↗