Cursor
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Threat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Named in breach reports by Ars Technica (Security)Malicious update to Anthropic's Claude VS Code extension on Cursor marketplace ran for nearly 12 hours
- Malware reported by Dark ReadingTrojanized Claude Code extension for Cursor hits developers, with a second Cursor issue the same day
- Vulnerability reported by Help Net SecurityEmbedded browsers in five AI coding assistants allow code execution, file theft and address spoofing
- Malware reported by Help Net SecurityTampered Claude Code extension spread SSH backdoor via Open VSX and Cursor marketplaces
- Activity reported by Cyber Security NewsDeceptiveDevelopment hackers steal developer credentials to poison GitHub repositories and software packages
Recent news
Attackers use open-source ARTEX AI agent to automate Active Directory attacks
ARTEX, an open-source multi-agent penetration testing and command-and-control platform written in Go, is being abused to automate Active Directory attacks, including Kerberoasting, DCSync and lateral movement. Google's Threat Intelligence Group and Mandiant have seen it used since late August 2026 against organisations in several sectors, and Microsoft has linked it to a China-linked group targeting Microsoft 365 tenants. Google says it trades stealth for speed, so defenders can still detect it through its noisy logs and artefacts.
Malicious update to Anthropic's Claude VS Code extension on Cursor marketplace ran for nearly 12 hours
A malicious version (2.1.313) of Anthropic's official Claude VS Code extension was distributed through Anthropic's account on the Cursor marketplace, affecting at most 5,000 users. Anthropic published the fixed version 2.1.314 several hours later, and neither Cursor nor Anthropic has explained how the account was compromised. Extensions auto-update in Cursor by default, so affected users may have received the bad version automatically.
Trojanized Claude Code extension for Cursor hits developers, with a second Cursor issue the same day
A trojanized Claude Code extension targeting Cursor, an AI-powered IDE, has been reported as affecting developers. The same day also saw a second serious security issue affecting Cursor, which the article highlights as a wider risk for AI-assisted development environments.
Embedded browsers in five AI coding assistants allow code execution, file theft and address spoofing
Forever Security reported flaws in the embedded browsers of Cursor, GitHub Copilot, OpenAI Codex, VS Code and Claude Desktop, grouped under the name EMBRACE. Impacts include code execution in Cursor, address-bar spoofing in Copilot, and local file reads in Codex, VS Code and Claude Desktop, including SSH keys, .env files and npm tokens. Cursor and Copilot have been fixed, while Codex and VS Code were unpatched at publication.
Tampered Claude Code extension spread SSH backdoor via Open VSX and Cursor marketplaces
Phorion researchers found that Claude Code extension version 2.1.313 was tampered with and published on Open VSX, the Eclipse Foundation's open-source marketplace for VS Code-compatible editors. BleepingComputer reports it was distributed through Cursor's extension marketplace for about 11 hours on October 29, exposing up to 5,000 developers to malware that installs persistent SSH backdoors. Microsoft's Visual Studio Marketplace never carried the compromised build.
DeceptiveDevelopment hackers steal developer credentials to poison GitHub repositories and software packages
ESET reports that DeceptiveDevelopment, a North Korea-aligned group, used stolen Git credentials, SSH keys and tokens between April and September 2026 to alter public and private repositories, often rewriting commit history. Poisoned code appeared on npm, the Go module mirror, Packagist, PyPI and browser extension marketplaces, and the group deployed the OmniStealer infostealer and the DEVPOPPER remote access trojan.
GOLD OGRE uses Cursor and Claude AI agents to automate Aur0ra ransomware attacks
The GOLD OGRE group is using AI coding agents, including Cursor and Anthropic's Claude, to automate intrusions that lead to Aur0ra ransomware deployment. Sophos Counter Threat Unit researchers, reporting in May 2026, said the agents progressed from credential access to domain administrator with minimal human involvement.