Anthropic denies breach as tampered Claude Code extension hits Cursor users

A tampered copy of Anthropic’s Claude Code extension sat in Cursor’s extension marketplace for about 11 hours on Thursday 29 October. It reached up to 5,000 users. The malicious versions tried to plant an SSH backdoor on developers’ machines, Cursor said in a security notice. Anthropic says nobody…

aisecurity

Sources