Major Security Breach: Malicious Claude Code Extension Compromises 5,000 Users on Cursor Marketplace

10/31/2026

Cursor removed a compromised Claude Code extension from its marketplace on October 29. This came after researchers found out that the malicious extensions installed an SSH backdoor. An estimated...

10/30/2026

Cursor, the coding-tool company owned by SpaceX , said on Friday that a ​maliciously modified version of Anthropic’s Claude Code ‌extension was available on its Cursor VS Code extension...

10/30/2026

A tampered Claude Code extension in Cursor's marketplace tried to plant SSH backdoors on up to 5,000 developer machines. What to check.

10/30/2026

Cursor, the coding platform owned by SpaceX, had to take down its extension marketplace after the company found a malicious Claude Code extension. This extension, the company clarified, was not...

10/30/2026

Cursor temporarily suspended its extension marketplace after discovering a compromised Claude Code extension capable of installing a backdoor and giving attackers remote access to users'...

10/30/2026

Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting...

10/30/2026

Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor

10/30/2026

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers' machines, multiple sources reported Friday. Anthropic so far has yet to warn customers...

10/30/2026

A malicious extension on Cursor's marketplace attempted to give hackers persistent access to developers' computers, raising concerns about the growing security risks of AI coding tools.

10/29/2026

Anthropic says Claude chained software flaws into working exploits, highlighting the growing role of AI in vulnerability research and cybersecurity risks