Cursor flags tampered Claude extension

Cursor reports a malicious version of Anthropic's Claude Code extension affected up to 5000 users. The company removed the software and rebuilt its marketplace.

FILE PHOTO: Claude logo and a keyboard in this illustration taken October 19, 2026. REUTERS/Dado Ruvic/Illustration/File Photo

Cursor said up to 5,000 users were affected after a maliciously modified version of Anthropic's Claude Code extension hit its marketplace on Thursday. The incident marks a security breach for the coding-tool company owned by SpaceX. Investors are tracking platform security risks as developer tools increasingly rely on third-party marketplace integrations.