# Malicious Claude Code Extension Compromises Thousands of Cursor IDE Users A supply chain attack injected backdoor-laden extensions into the Cursor marketplace for eleven hours. - **Source:** [Wired](https://www.wired.com) - **Published:** 2026-10-30 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/199a448b-403d-4457-98cb-ea11633d51ea ## Marketplace Security Breach On Thursday, the Cursor IDE marketplace hosted a malicious version of the Anthropic Claude Code extension for approximately eleven hours. This supply chain attack affected Windows, macOS, and Linux users. Cursor temporarily disabled its marketplace to investigate the incident, confirming that the breach was isolated specifically to this single rogue extension. ## Scope of the Infection Cursor reported that the malicious extension was downloaded by a maximum of 5,000 users before the threat was mitigated. Despite the potential for widespread device compromise, a technical flaw within the malware's design prevented it from fully establishing persistence on the vast majority of the targeted machines, limiting the overall impact. ## Nature of the Backdoor The tainted extension functioned as a backdoor, designed to grant unauthorized attackers remote access to victim devices. Security researchers at Phorion identified the threat after detecting suspicious activity on a customer's Mac. Experts noted that such implants typically serve as a critical stepping stone for hackers to gain deeper network control. ## Anthropic System Integrity Anthropic confirmed that its own internal systems and employee laptops remained uncompromised throughout the incident. Felix Rieseberg and David Dworken from Anthropic clarified that the company did not develop, publish, or host the tampered extension. Official channels for Claude Code remain secure, with the issue strictly confined to the Cursor platform. ## Unauthorized Publishing Mechanism The incident involved a malicious actor gaining unauthorized access to Cursor's marketplace to publish the tampered software. While Cursor provided remediation steps for the 5,000 affected targets, the company has not yet disclosed the specific mechanism that allowed the attacker to bypass marketplace security controls or upload the malicious code. ## Investigation and Remediation Cursor is currently managing the fallout by providing guidance to users who may have installed the compromised extension. The company has not responded to requests regarding whether the upload resulted from a direct breach of their internal infrastructure. Security teams continue to monitor the situation to ensure no further malicious extensions exist. ## Industry Security Implications This event highlights the inherent risks within integrated development environment marketplaces where third-party extensions are distributed. Developers rely on these platforms for productivity, yet they remain vulnerable to supply chain attacks. The incident serves as a reminder that even trusted IDE ecosystems can be exploited to deliver sophisticated malware payloads. ## Future Defensive Outlook The failure of the malware to execute fully on most devices underscores the importance of robust endpoint security. Moving forward, developers should exercise caution when installing extensions, even from official marketplaces. Enhanced verification processes for marketplace uploads are essential to prevent similar unauthorized access and protect the integrity of developer tools. ## Sources covering this story - https://www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._