Supply chain attack put malicious Claude extensions on thousands of developer devices
🤖 AI-generated content — The title and summary were produced automatically by artificial intelligence, without human editorial review.
A rogue Anthropic Claude Code extension sat in Cursor’s IDE marketplace for roughly 11 hours on Thursday on Windows, macOS, and Linux and was downloaded by at most 5,000 users. It carried a backdoor, but a design flaw kept it from fully taking hold on most machines. Cursor briefly shut the marketplace, said other extensions were unaffected, and published remediation steps. Phorion, led by CEO Calum Hall, first flagged it on a customer Mac. Cursor has not explained how it was listed and said the malicious builds were not from a compromised Anthropic system.
Continue in the app — vote & join in ➔Source: Wired · via ahirlevel.hu