Malicious Claude Code extension on Cursor marketplace hit up to 5,000 users in 11 hours
The Decoder · rss · 2026-10-31
- A tampered Claude Code extension was live on Cursor's marketplace for about 11 hours, attempting to steal user data and set up remote access, affecting up to 5,000 users.
- Cursor took the entire marketplace offline and reinstated it after confirming no further risk, highlighting supply-chain security risks in AI coding tool ecosystems.
More from coding & agent
- Dev ditches GitHub Actions for Celesto CI, saves $1,000 — aniketmaurya · 2026-10-31
- Scratching His Own Itch: Dev Turns Unreliable Social APIs Into ReachSocial.dev — FewScarcity6957 · 2026-10-31
- Microsoft's ScholarEvolve evolves agent harnesses with frozen models, +14 points on AppWorld — jiqizhixin · 2026-10-31
- Team uses Gemini as a subagent for tricky architecture and system design problems — AccBalanced · 2026-10-31
- Toska: Open-Source Krita Fork With an Agentic AI Painter for Under $7/Month — yawk-ra · 2026-10-31
- 'Don't use tools you can't fully control': OpenClaw pitch sparks agent autonomy debate — heyneighbor · 2026-10-31