Wireva

Tampered Claude Code Extension Sat in Cursor Marketplace for Eleven Hours

A tampered extension for Claude Code was accessible in the marketplace of the Cursor editor for about eleven hours. It attempted to steal user data and set up remote access. Cursor temporarily took the entire marketplace offline.

Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
Tampered Claude Code Extension Sat in Cursor Marketplace for Eleven Hours
Text editor · Wikimedia — licence per file · rights
Monitoring item. The full text is not distributed. Extract and source below.

A tampered extension for Claude Code was accessible in the marketplace of the Cursor editor for about eleven hours. It attempted to steal user data and set up remote access. Cursor temporarily took the entire marketplace offline.