Cursor pulls plugin marketplace after malicious Claude Code extension hits up to 5,000 users
EricBuess · x · 2026-10-30
- Cursor disclosed a security incident involving a modified, malicious Claude Code VS Code extension distributed via its IDE marketplace, affecting at most 5,000 users. The extension was not developed by Anthropic.
- Cursor took down the marketplace the same afternoon, worked with providers to neutralize the malware, and reinstated it after confirming no further risk.
- Affected users are directed to a blog post with instructions for finding the malicious package and recovering. The incident highlights supply-chain risks in AI coding tool plugin ecosystems.
Related event: Poisoned Claude Code VS Code Extension Backdoors Up to 5,000 Users(5 posts)→
More from coding & agent
- Even automatic approval is at capacity: 'Selected model is at capacity' — Angaisb_ · 2026-10-30
- Claude + PeekPanda MCP turns natural language into competitor ad intelligence across 5M+ ads — fekdaoui · 2026-10-30
- Obsidian Recovery Playbook: Check Trash, File Recovery, Sync, Git, Backups — dSebastien · 2026-10-30
- OpenMausBot: Open-Source Grok Bot Clone for Running an AI Robot Fleet via Chat — lxfater · 2026-10-30
- Ghostty creator Mitchell Hashimoto unveils Rex, a polished new terminal with open macOS beta — jasonkneen · 2026-10-30
- pi-durable performance pass: every agent step saved as a commit for crash resume — mitsuhiko · 2026-10-30