Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
The Decoder
A tampered Claude Code extension was live on the Cursor marketplace for about 11 hours, affecting up to 5,000 users. It tried to steal user data and set up remote access.
Summary drawn from The Decoder's own description of the story.