Wire flash
Malicious Claude Code extension reportedly shipped via Cursor marketplace in supply chain attack
Editorial responsibility
- No named human review is recorded for this page.
- Source reporting is collected, normalized, translated or condensed automatically when needed.
- Automatically published source-backed update
A malicious Claude Code extension was distributed through Cursor's marketplace this week, according to a post by YvesMulkers. The post characterizes the incident as a supply chain attack targeting a tool that users trust by default. No further details were provided in the source item about the extension's name, the nature of the malicious behavior, the number of affected users, or any response from Cursor or Anthropic. The post also links to a daily AI and data newsletter.
Source report
A malicious Claude Code extension was shipped through Cursor's marketplace this week, constituting a supply chain attack on a tool that users trust by default.
Related Links
- Daily read on AI and data: https://t.co/tQYt5OAW7i
- Powered by: https://t.co/HsERepHleV
Source
YvesMulkersNeutral / independent
Part of this Story
Anthropic's Claude Code extension shipped with SSH backdoor via Cursor marketplace