Article · The Decoder ·
Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
A tampered Claude Code extension was live on the Cursor marketplace for about 11 hours, affecting up to 5,000 users. It tried to steal user data and set up remote access. Cursor took the entire marketplace offline and reinstated it after confirming there was no further risk.
Read at the-decoder.com The opening of the original, or for stories before 30 October 2026 an AI model's summary of it. Check the original before you rely on a detail.
In this story
A tool or model opens in the Heidelberg AI Curriculum: what it does, what it costs, how to start. A repo opens on GitHub.
