Friday, 30 October, 2026
Trojan in the Tooling: Malicious Extension Backdoors 5,000 Cursor Users
By TechShots Studio
AI coding platform Cursor temporarily shut down its marketplace after discovering a tampered version of Anthropic’s Claude Code extension. Live for 11 hours, the malicious plugin affected up to 5,000 users by exfiltrating system data and attempting to install an SSH backdoor. Cursor removed the package, took the attacker’s server offline, and confirmed no other extensions were compromised.
Read full story at REUTERS