GoKawiilMalicious Claude Code extension spread through Cursor marketplace for 11 hours
Cursor, the SpaceX-owned AI coding platform, found a backdoored version of Anthropic's Claude Code extension in its marketplace for about 11 hours on Thursday, downloaded by up to 5,000 users across Windows, macOS and Linux. Cursor temporarily closed the marketplace, said no other extensions were affected, and published remediation steps. Anthropic confirmed its own systems and official distribution channels were not compromised, saying an attacker used access to Cursor's marketplace to publish a tampered copy.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident highlights how extension marketplaces for AI development tools can become attack vectors even when the underlying AI company's systems remain secure, researchers say. A design flaw in the malware reportedly prevented it from fully installing on most affected machines, which security researcher Calum Hall suggests may have limited what could have been a serious network foothold for attackers. How the tampered extension got published in the first place remains unresolved, leaving open questions about marketplace vetting practices.
- A backdoored Claude Code extension was live on Cursor's marketplace for roughly 11 hours and downloaded by up to 5,000 users.
- Anthropic says its own systems and official channels were not compromised; the attacker exploited access to Cursor's marketplace instead.
- A flaw in the malware's design reportedly stopped it from fully establishing itself on most affected devices, limiting potential damage.
YubiKey 5C NFC Security Key — Supply chain attacks like this one highlight why developers need strong hardware-backed authentication protecting their accounts and code repositories. A YubiKey adds a physical layer of security that phishing and malware can't easily bypass, making it a smart addition to any developer's security toolkit.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: wired.com — Lily Hay Newman, 2026-10-30
Published there as: “A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.