
Cursor Shuts Down Marketplace After Malicious Claude Code Extension Affects 5,000 Users
What Happened?
Cursor, owned by SpaceX, temporarily closed its extension marketplace after discovering a malicious Claude Code extension that affected 5,000 users. The company confirmed no further risk remains.
Key points
- Cursor identified a security incident involving a modified Claude Code VS Code extension.
- The malicious extension could collect user information and allow remote access.
- Cursor took down the marketplace but restored it shortly after neutralizing the malware.
- The incident affected 5,000 users, but no other extensions were impacted.
- Cursor advised users to update their Claude Code extensions.
Key insights
- The incident may prompt increased scrutiny of extension security in coding platforms.
- Users may become more cautious about downloading extensions in the future.
- This event adds to the growing list of cybersecurity issues reported this month.
Why it matters
This incident highlights the ongoing risks of cybersecurity threats in technology platforms.
Tags
Entities
Source
India Today