Hackers hijacked a Claude Code extension, exposing yet another new AI security risk
This story is from 2026-10-30. It is preserved in the archive; the latest stories are on the live feed.
A malicious extension on Cursor’s marketplace attempted to give hackers persistent access to developers’ computers, raising concerns about the growing security risks of AI coding tools.
Read the full story at Fast Company AI ↗
Timeline · 7 reports
- 2026-10-30 18:16 · The Decoder
Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft - 2026-10-30 17:29 · Fast Company AI
Hackers hijacked a Claude Code extension, exposing yet another new AI security risk - 2026-10-30 12:59 · r/ClaudeAI
A backdoored Claude Code extension hit up to 5,000 Cursor users - 2026-10-30 11:18 · r/LocalLLaMA
Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor - 2026-10-30 08:05 · Unite.AI
Cursor Discloses SSH Backdoor Attempt in Malicious Claude Code Extension - 2026-10-30 07:46 · AlphaSignal
Cursor's Claude Code Extension Was Hijacked, Exposing 5,000 Developers to SSH Backdoor - 2026-10-30 07:09 · Hacker News Front Page
Backdoor in Claude Code for VS Code extension on the Cursor Marketplace