Cursor discloses malicious Claude Code extension in its marketplace

Image: Primary

Published Friday, October 30, 2026 · 8:15 AM EDT

Cursor disclosed Friday that a counterfeit Claude Code extension remained in its marketplace for about 11 hours on Thursday, potentially reaching up to 5,000 users. The extension was modified with malicious code and was not built by Anthropic. The extension targeted computer hostnames, usernames, operating systems and public IP addresses, and attempted to enable remote control. Cursor said one step required administrator permissions and would fail on most computers. The company shut down the marketplace, rebuilt it and restored service, saying no other extension was affected.

Sources

The News International

In this story

Anthropic

Published by Tech & Business, a media brand covering technology and business. This story was sourced from The News International and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Security Products

Binance says breach affected about $6.3 billion in assets

Binance said its security incident affected about $6.3 billion in assets and that nearly $3 billion had been frozen on-chain.

Capital AI

Ares Intelligence raises €2.6 million for employee-based AI adoption planning

London-based Ares Intelligence has secured €2.6 million in funding backed by Creandum and Lakestar, with participation from angels connected to Google DeepMind. The company says the capital will fund expansion of its operations.

Capital

Manastu Space raises ₹22 Cr in ongoing funding round

Manastu Space raised ₹22 Cr ($2.3 Mn) from Gandhi Securities and Investments, the Thacker Legacy Trusts and angel investors, Inc42 reported from regulatory filings.

Security

Drupal warns of active exploitation of Commerce Core authorization flaw

Drupal has warned that attackers are actively exploiting an authorization flaw in Commerce Core that may financially affect merchants, The Hacker News reported.

Infrastructure Products

CXMT swings to profit as quarterly revenue rises sevenfold

Chinese memory chipmaker CXMT posted a sevenfold increase in quarterly revenue and swung from a loss to a profit, Bloomberg reported. The company expanded capacity aggressively and increased its role as a global supplier of conventional memory, or DRAM.

Capital Products

Greentech Alliance agrees to acquire mobility network Intermobility

Berlin-based Greentech Alliance has agreed to acquire Paris-based Intermobility, bringing a transport network of more than 1,000 companies, public authorities and other participants into its sustainable technology community.