Cursor says up to 5,000 users affected by tampered Claude Code extension
· CNA · JoinRead a summary of this article on FAST.
Get bite-sized news via a new
cards interface. Give it a try.
Click here to return to FAST Tap here to return to FAST
FAST
Oct 30 : Cursor, the coding-tool company owned by SpaceX, said on Friday that a maliciously modified version of Anthropic’s Claude Code extension was available on its Cursor VS Code extension marketplace on Thursday, affecting up to 5,000 users.
Here are some details:
• Cursor said the extension was not developed by Anthropic and the maliciously modified extension was live on the marketplace from about 2:27 a.m. PT to 1:35 p.m. PT on Thursday
• The extension attempted to collect host and user information such as hostname, username, operating system and public IP address
CNA Games
Guess Word
Crack the word, one row at a time
Buzzword
Create words using the given letters
Mini Sudoku
Tiny puzzle, mighty brain teaser
Mini Crossword
Small grid, big challenge
Word Search
Spot as many words as you can
Show More
Show Less
• It also attempted to set up remote access for the attacker; Cursor said a key step would have failed on most machines because it requires administrator rights
• Upon detection, Cursor removed the malicious version and blocked its distribution and shut down the marketplace as a precaution
• The company then rebuilt the marketplace and brought it back online, it said
• Cursor said the incident did not impact other extensions on its marketplace
• Anthropic did not immediately respond to a request for comment
Newsletter
Week in Review
Subscribe to our Chief Editor’s Week in Review
Our chief editor shares analysis and picks of the week's biggest news every Saturday.
Sign up for our newsletters
Get our pick of top stories and thought-provoking articles in your inbox
Get the CNA app
Stay updated with notifications for breaking news and our best stories
Get WhatsApp alerts
Join our channel for the top reads for the day on your preferred chat app