SpaceX-owned Cursor disclosed that maliciously modified versions of Anthropic’s Claude Code extension appeared in its marketplace, potentially affecting up to 5,000 users.
SpaceX-owned Cursor disclosed that maliciously modified versions of Anthropic’s Claude Code extension appeared in its marketplace, potentially affecting up to 5,000 users.
The compromised extensions attempted to collect system information and establish persistent SSH backdoors for unauthorized remote access. Cursor removed the affected packages, helped shut down the attackers’ server, and published remediation instructions.