Back to Latest SignalTECHMEME / MODEL RELEASE

Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish (Felix Rieseberg/@felixrieseberg)

Source: TECHMEME · OCT 31, 2026

Felix Rieseberg / @felixrieseberg : Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish — We're working with Cursor on this incident, but it wasn't a compromise of Anthropic's systems or employee laptops. A malicious actor used access to Cursor's marketplace to publish a tampered copy of the Claude Code extension, which we didn't build or publish. The versions on our official channels a...

IN THIS STORY
  • Anthropic
  • Claude Code
  • Cursor

Sources

  • Read the original at TECHMEME

Related on Frontier

  • Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor Oct 30, 2026
  • Devs Hit by Trojanized Claude Code Extension for Cursor Oct 30, 2026
  • Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes Oct 29, 2026
  • Claude Model Builds Exploits Across Major Browsers & OSes Oct 29, 2026
MORE LATEST SIGNALSIGNALS