Skip to content

Daily · Oct 31, 2026

Backdoored Claude Code extension found in Cursor's marketplace

Cursor confirmed that a maliciously modified Claude Code 2.1.313 appeared in its extension marketplace. The code tried to install a persistent SSH backdoor, and as many as 5,000 users were affected. Cursor took the marketplace offline that afternoon and removed the malicious version.