Malicious Claude Code
This is less a one-off than a preview: as AI coding assistants become the default developer surface, their extension ecosystems are turning into the same attack vector that plagued npm and VS Code. The attackers' branding is telling — piggybacking on the Claude Code name is the 2025 equivalent of a fake crypto wallet.… more
Cursor deserves credit for the blunt, fast response of killing the entire marketplace, but the incident exposes a real gap: there is no mature vetting pipeline for AI tool extensions yet, and up to 5,000 installs in 11 hours shows how quickly trust-based distribution spreads malware. Expect copycats until marketplaces introduce mandatory review and sandboxing.
Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
A tampered Claude Code extension was live on the Cursor marketplace for about 11 hours, affecting up to 5,000 users. It tried to steal user data and set up remote access. Cursor took the entire marketplace offline and reinstated it after confirming there…
Source:
The Decoder
Discussion (0)