Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
A tampered Claude Code extension was live on the Cursor marketplace for about 11 hours, affecting up to 5,000 users. It tried to steal user data and set up remote access. Cursor took the entire marketplace offline and reinstated it after co
Read the original at The Decoder ↗Also reported by 4 other newsrooms
BleepingComputerMalicious Claude Code extension on Cursor planted SSH backdoorsHacker News · 100+Backdoors in official Claude Code extensionsThe Hacker NewsOfficial Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorHacker NewsBackdoor in Claude Code for VS Code extension on the Cursor Marketplace