IT之家 · ITHome
Malicious Claude Code extension distributed through Cursor marketplace for about 11 hours
A tampered Anthropic Claude Code extension was distributed through Cursor’s marketplace for about 11 hours, with up to 5,000 developers potentially downloading it. The malware tried to install a persistent SSH backdoor, although configuration errors may have prevented remote access on some devices. Cursor removed the extension, temporarily closed the marketplace and helped shut down the attacker’s server.
What to know
- 01
The malicious code ran automatically after installation, sending usernames, hostnames, public IP addresses, Git email addresses and names of environment variables associated with sensitive credentials to the attacker’s server.
- 02
Cursor temporarily closed the marketplace to review other plugins and rotate access keys, but has not explained how the attacker published the tampered package under Anthropic’s name.
Why it matters
The incident concerns distribution security in an official plugin marketplace; Cursor says it has found no impact on other extension versions or official distribution channels.
AI-assisted brief. Read the source for full details. Editorial & sourcing policy
