Malicious Claude Code extension found and removed from Cursor's marketplace
0xkarasy · x · 2026-10-31
Analysis confirmed a malicious Claude Code extension was distributed through Cursor's marketplace and has since been removed. Microsoft's VS Code Marketplace extension and Anthropic's npm package were not affected — a supply-chain security reminder for AI coding users.
More from coding & agent
- Meta's coding model Muse Ember goes live on OpenRouter for agent sub-task fan-out — alexandr_wang · 2026-11-10
- Meta's Muse Ember coding model is now available in OpenCode — alexandr_wang · 2026-11-10
- OpenRSI scales recursive self-improvement to SGLang-Omni, +7.6%–344% throughput via 14 merged PRs — ChengleiSi · 2026-11-10
- OpenCode cuts memory 41% and OpenClaw starts 3.1x faster with Bun AoT — steipete · 2026-11-10
- Vibe-coded ambient music DAW 'Ambient Town' in a week with Push support — kieranklaassen · 2026-11-10
- GR00T 2's WAM API lets reasoning agents steer robots by pointing in the camera view — yukez · 2026-11-10