AI-powered coding platform Cursor has warned that up to 5,000 users may have been affected by a malicious version of the Claude Code extension, raising concerns about security risks associated with third-party software.
The affected extension was reportedly available on Cursor’s marketplace for approximately 11 hours before the company identified and removed it.
According to reports, the malicious extension attempted to collect sensitive information from users’ computers, including usernames, operating system details, device information and public IP addresses. It also attempted to establish a means of remote access that could potentially expose affected systems to further attacks.
Following the discovery, Cursor temporarily shut down its extension marketplace while investigating the incident and taking steps to address the security threat.
The company has since restored the marketplace and indicated that other extensions were not affected by the incident.
Users who installed the compromised version are advised to follow Cursor’s security recommendations and ensure they are using a safe, updated version of Claude Code.
The incident highlights the growing cybersecurity challenges facing developers as AI-powered coding tools become increasingly popular. It also reinforces the importance of verifying software extensions and maintaining strong security practices when using third-party development tools.
As AI adoption continues to expand across the technology industry, protecting users from malicious software and supply-chain attacks remains a major priority for software providers.
Leave a comment