E
Cursor says around 5,000 people may have installed a malicious Claude Code extension.
The SpaceX-owned AI coding tool says the modified version of Claude Code appeared on its extension marketplace from 5:27AM ET and 4:35PM ET on Thursday. The extension contains malicious code that collects various information, including hostname, username, operating system, home directory path, public IP address, and more.
Cursor has since removed the malicious extension from its marketplace and verified that “no other extensions were tampered with.”
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
Loading comments
Getting the conversation ready...
Most Popular
Most Popular
- The 2026 iPad Mini is a terrific tiny tablet — for a big price
- Bambu’s nine-nozzle H3C foretells the future of 3D printing
- Those Jeff Bezos hair transplant photos are very fake
- One of Google’s Android partners turned 1.3 million set-top boxes into a botnet
- The Elder Scrolls VI officially has a name: Sentinel
