Malicious Claude Code extension shipped via Cursor marketplace in supply chain attack
YvesMulkers · x · 2026-11-04
A malicious Claude Code extension was distributed this week through Cursor's marketplace — a supply chain attack targeting tools developers trust by default. The post flags the trust risk in AI coding tool ecosystems and links to the author's daily AI/data newsletter.
Related event: Malicious Claude Code Extension Backdoors Cursor Marketplace(3 posts)→
More from coding & agent
- Meta's coding model Muse Ember goes live on OpenRouter for agent sub-task fan-out — alexandr_wang · 2026-11-10
- Meta's Muse Ember coding model is now available in OpenCode — alexandr_wang · 2026-11-10
- OpenRSI scales recursive self-improvement to SGLang-Omni, +7.6%–344% throughput via 14 merged PRs — ChengleiSi · 2026-11-10
- OpenCode cuts memory 41% and OpenClaw starts 3.1x faster with Bun AoT — steipete · 2026-11-10
- Vibe-coded ambient music DAW 'Ambient Town' in a week with Push support — kieranklaassen · 2026-11-10
- GR00T 2's WAM API lets reasoning agents steer robots by pointing in the camera view — yukez · 2026-11-10