Malicious Claude Code Extension Compromises Thousands of Cursor IDE Users
A supply chain attack injected backdoor-laden extensions into the Cursor marketplace for eleven hours.
1Marketplace Security Breach
On Thursday, the Cursor IDE marketplace hosted a malicious version of the Anthropic Claude Code extension for approximately eleven hours. This supply chain attack affected Windows, macOS, and Linux users. Cursor temporarily disabled its marketplace to investigate the incident, confirming that the breach was isolated specifically to this single rogue extension.
2Scope of the Infection
Cursor reported that the malicious extension was downloaded by a maximum of 5,000 users before the threat was mitigated. Despite the potential for widespread device compromise, a technical flaw within the malware's design prevented it from fully establishing persistence on the vast majority of the targeted machines, limiting the overall impact.
3Nature of the Backdoor
The tainted extension functioned as a backdoor, designed to grant unauthorized attackers remote access to victim devices. Security researchers at Phorion identified the threat after detecting suspicious activity on a customer's Mac. Experts noted that such implants typically serve as a critical stepping stone for hackers to gain deeper network control.
4Anthropic System Integrity
Anthropic confirmed that its own internal systems and employee laptops remained uncompromised throughout the incident. Felix Rieseberg and David Dworken from Anthropic clarified that the company did not develop, publish, or host the tampered extension. Official channels for Claude Code remain secure, with the issue strictly confined to the Cursor platform.
5Unauthorized Publishing Mechanism
The incident involved a malicious actor gaining unauthorized access to Cursor's marketplace to publish the tampered software. While Cursor provided remediation steps for the 5,000 affected targets, the company has not yet disclosed the specific mechanism that allowed the attacker to bypass marketplace security controls or upload the malicious code.
6Investigation and Remediation
Cursor is currently managing the fallout by providing guidance to users who may have installed the compromised extension. The company has not responded to requests regarding whether the upload resulted from a direct breach of their internal infrastructure. Security teams continue to monitor the situation to ensure no further malicious extensions exist.
7Industry Security Implications
This event highlights the inherent risks within integrated development environment marketplaces where third-party extensions are distributed. Developers rely on these platforms for productivity, yet they remain vulnerable to supply chain attacks. The incident serves as a reminder that even trusted IDE ecosystems can be exploited to deliver sophisticated malware payloads.
8Future Defensive Outlook
The failure of the malware to execute fully on most devices underscores the importance of robust endpoint security. Moving forward, developers should exercise caution when installing extensions, even from official marketplaces. Enhanced verification processes for marketplace uploads are essential to prevent similar unauthorized access and protect the integrity of developer tools.
Original article: Wired — Malicious Claude Code Extension Compromises Thousands of Cursor IDE Users