AINewsnow

The Claude Code Extension Backdoor That Lived in Cursor's Own Marketplace for 11 Hours

This story is from 2026-11-03. It is preserved in the archive; the latest stories are on the live feed.

The Claude Code Extension Backdoor That Lived in Cursor's Own Marketplace for 11 Hours A Claude Code extension backdoor sat live in Cursor's own VS Code extension marketplace for about eleven hours on October 29, 2026, reaching up to 5,000 developer machines before anyone caught it. The unsettling…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-03 05:48 · DEV Community — AI
    The Claude Code Extension Backdoor That Lived in Cursor's Own Marketplace for 11 Hours

More stories

  1. MCP Server Ecosystem Expands as Security Concerns Mount Over Agent Permissions — DEV Community — AI
  2. How I audit AI-written code — and the bug that proved why — DEV Community — AI
  3. One key, several coding agents: making API bills readable — DEV Community — AI
  4. Give your AI agent WhatsApp, SMS, and email with Zavu's MCP server — DEV Community — AI
  5. 7 Ways to Improve AI Code Reviews — DEV Community — AI
  6. How does the RustRover debugger MCP server work? — DEV Community — AI
  7. Stop pasting files to Cursor/Claude! I built an open-source whiteboard to generate compact tree docs for AI agents — DEV Community — AI
  8. Giving Claude and Cursor live X data through a hosted MCP server: config plus two prompts — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →