Security Breach: Malicious Claude Code Extension Compromises 5,000 Cursor Users

10/30/2026

Cursor, the coding platform owned by SpaceX, had to take down its extension marketplace after the company found a malicious Claude Code extension. This extension, the company clarified, was not...

10/30/2026

Cursor, the coding-tool company owned by SpaceX , said on Friday that a ​maliciously modified version of Anthropic’s Claude Code ‌extension was available on its Cursor VS Code extension...

10/30/2026

Cursor detected a tampered version of Anthropic's Claude Code extension risking user data and remote access.

10/30/2026

A tampered Claude Code extension in Cursor's marketplace tried to plant SSH backdoors on up to 5,000 developer machines. What to check.

10/30/2026

Cursor temporarily suspended its extension marketplace after discovering a compromised Claude Code extension capable of installing a backdoor and giving attackers remote access to users'...

10/30/2026

Cursor temporarily closed its extension marketplace after discovering a malicious Claude Code extension affecting 5,000 users, offering a fix and ensuring no further risk remains.

10/30/2026

Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting...