Skip to content
AI IntelligenceOct 31, 2026AI Intelligence
Article

Tampered Claude Code extension on Cursor marketplace exposed up to 5,000 users over 11 hours

A tampered Claude Code extension was available on Cursor's marketplace for about 11 hours, affecting up to 5,000 users. It attempted to steal user data and set up remote access, prompting Cursor to take the marketplace offline; it was reinstated after no further risk was confirmed.

Frontier EditorialSource: The Decoder
01

Source Brief

Tampered Claude Code extension on Cursor marketplace exposed up to 5,000 users over 11 hours: A tampered Claude Code extension was available on Cursor's marketplace for about 11 hours, affecting up to 5,000 users. It attempted to steal user data and set up remote access, prompting Cursor to take the marketplace offline; it was reinstated after no further risk was confirmed.