Cursor finds malicious Claude Code in marketplace, up to 5,000 users at risk of remote access
Polymarket · x · 2026-10-30
Polymarket reports that Cursor discovered a malicious version of Claude Code in its marketplace that attempts to give hackers remote access to users' computers, potentially affecting up to 5,000 users. A rare real-world supply chain attack on AI coding tools, highlighting the trustworthiness of extension marketplaces.
More from coding & agent
- Sentence Transformers adds tunable compression: R2 rerankers keep 92% nDCG@10 at 128x — tomaarsen · 2026-10-30
- SuperPlane, an Open-Source Factory for One-Shot Engineering, Hits 8.5k GitHub Stars — Arindam_1729 · 2026-10-30
- Flexibility isn't free: the complexity you remove from your library just moves — Franc0Fernand0 · 2026-10-30
- Remote agent dev on Linux beats macOS local dev for debugging — DanielLockyer · 2026-10-30
- This attention code runs clean with correct shapes—yet one bug silently breaks what the model learns — cneuralnetwork · 2026-10-30
- Stacked logical commits: how one team structures AI-generated optimization PRs for cherry-picking — jmschreiber91 · 2026-10-30