Trojanized Claude Code extension for Cursor hits developers, with a second Cursor issue the same day
MALWAREClaude Coderedteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Reporting describes a trojanized Claude Code extension distributed for Cursor, an AI-powered IDE, and notes that two serious security issues affected Cursor on the same day. The article gives no CVE identifiers, affected extension or Cursor versions, distribution channel, or indicators of compromise. Defenders should audit installed Cursor extensions, confirm the Claude Code extension's publisher and hash against official sources, and check developer workstations for unexpected activity until more technical detail is published.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Review the extensions installed in Cursor and confirm that any Claude Code extension comes from a trusted, official source.
- Remove any Claude Code extension that you cannot verify and check the affected machine for unexpected activity.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Dark Reading
Who and what is in it
Products