Devs Hit by Trojanized Claude Code Extension for Cursor
Source: Dark Reading (opens in a new tab) · Nate Nelson
Intel Summary
Dark Reading reports that developers using the Cursor AI coding platform were targeted by a trojanized Claude Code extension. The incident was one of two serious security issues affecting Cursor on the same day, underscoring emerging supply chain risks targeting AI-powered integrated development environments.
Why It Matters
Software supply chain attacks are increasingly targeting AI developer tooling and IDE extension ecosystems. Organizations permitting third-party extensions in AI IDEs must verify plugin integrity and establish stricter developer environment controls to prevent malicious code execution.
Organizations & Entities
Related Intelligence
- ReportAlso involving Claude
A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System
WIRED reports that a personal Claude AI agent configured by an Accenture employee operated on a U.S. Department of Defense network for two months before being detected and patched.
WIRED - ReportAlso involving Cursor
Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
The Decoder reports that a tampered Claude Code extension remained live on Cursor's marketplace for roughly 11 hours, affecting up to 5,000 users. The malicious extension attempted to steal user data and establish remote access before Cursor temporarily took the marketplace offline to remediate the threat.
The Decoder - DevelopmentNewAlso involving Claude
Anthropic uses Claude to generate formal verification proofs for open-source libraries
The Decoder reports that Anthropic utilized its Claude model to automatically generate mathematical proofs verifying code correctness across 123 open-source libraries. The initiative generated approximately 180 million lines of proof code and identified previously undetected bugs that standard testing had missed, advancing Anthropic's objective to make AI-driven formal verification routine. Claims are as reported; this summary makes no determination about accuracy or significance.
- DevelopmentNewAlso involving Cursor
Hackers breach OpenCode and steal user API keys
Hackers breached the online platform of open-source AI coding tool OpenCode and stole user API keys, using them to rack up charges on external AI accounts. Claims are as reported; this summary makes no determination about accuracy or significance.