Cursor says a malicious Claude Code extension reached up to 5,000 users
The tampered extension came through Cursor's extension marketplace.
Cursor says it found a security incident involving a modified Claude Code VS Code extension offered through its IDE extension marketplace. It affected at most 5,000 users.
The malicious version was not built by Anthropic, Cursor said. Other extensions were not affected.
Cursor took its marketplace offline, worked with providers to neutralize the malware, and brought the marketplace back once it confirmed there was no further risk. It is contacting affected users.
