Tampered Claude Code extension on Cursor marketplace tried data theft and remote access
🤖 AI-generated content — The title and summary were produced automatically by artificial intelligence, without human editorial review.
A tampered Claude Code extension was listed in Cursor’s VS Code marketplace for about eleven hours on Thursday, affecting up to 5,000 users; Anthropic did not build it. It attempted to collect hostname, username, operating system, and public IP and to set up remote access, which Cursor says typically requires admin privileges. Cursor removed the extension, took the entire marketplace offline, then restored it after working with providers to neutralize the malware and confirming no further risk; no other extensions were affected.
Continue in the app — vote & join in ➔Source: The Decoder (AI) · via ahirlevel.hu