E
Cursor says around 5,000 people may have installed a malicious Claude Code extension.
The SpaceX-owned AI coding tool says the modified version of Claude Code appeared on its extension marketplace from 5:27AM ET and 4:35PM ET on Thursday. The extension contains malicious code that collects various information, including hostname, username, operating system, home directory path, public IP address, and more.
Cursor has since removed the malicious extension from its marketplace and verified that “no other extensions were tampered with.”
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
Loading comments
Getting the conversation ready...
