Malicious Anthropic Claude Extension Targets Thousands of Cursor Users

Supply Chain Attack Affects Cursor Marketplace

A malicious version of an Anthropic Claude Code extension was discovered on the Cursor integrated development environment extension marketplace. According to reports, the rogue software was available for roughly 11 hours on Thursday across Windows, macOS, and Linux platforms.

Cursor, a platform owned by SpaceX, stated that the tainted extension was downloaded by "at most 5,000 users." Following the discovery, the company temporarily shut down its extension marketplace to investigate the incident, reporting that no other extensions were impacted.

Nature of the Threat and Technical Impact

Security researchers and company statements highlighted the potential risks of the incident:

• Backdoor Implant: The malicious extension was designed with a backdoor intended to give attackers unauthorized access to victim devices.
• Design Flaw: Security experts noted that a flaw in the malware's design prevented it from fully establishing itself on the vast majority of targeted systems.
• Expert Assessment: Calum Hall, cofounder and CEO of detection firm Phorion—which first spotted the extension on a customer's Mac—described it as a potentially dangerous foothold.

Investigation and Official Responses

Questions remain regarding how the malicious software was uploaded to the marketplace. Initial speculation suggested a potential compromise of Anthropic systems, but both Cursor and Anthropic representatives have clarified the situation.

• Anthropic Clarification: Felix Rieseberg and David Dworken, members of Anthropic's technical staff, stated on X that the incident did not involve a compromise of Anthropic's systems, networks, or employee laptops.
• Marketplace Access: According to Anthropic, a malicious actor utilized access to Cursor's marketplace to publish a tampered copy of the extension, which Anthropic did not build, host, or publish.
• Official Channels: Anthropic emphasized that versions distributed through official channels remain unaffected and that the issue is strictly limited to Cursor users.

Practical Implications and Verification

Users who utilized the affected platform during the brief window are advised to review security alerts and remediation steps published directly by Cursor. Independent verification of similar software supply chain incidents relies on consulting official security advisories issued by platform operators and checking system logs for unauthorized extensions.