Mmastodon TechnologyCybersecurity first seen 8 d ago, last 8 d ago, peak #1
Tampered Claude Code extension on Cursor marketplace planted backdoor
Original: Tampered Claude Code extension on Cursor's marketplace tried to plant a hidden remote-access backdoor Altered copies of
Altered copies of the Claude Code extension were available on Cursor's marketplace for several hours on October 29, 2026, before being removed. Microsoft said the hidden code attempted to establish persistent remote access to affected systems. Security researchers are urging developers who installed the extension to check their machines, and the incident is renewing debate over how thoroughly marketplace extensions are vetted before publication.
Why now: A supply-chain attack on a popular developer tool raises urgent concerns about marketplace security and potential compromise of developer machines.
Claude CodeCursorMicrosoftAnthropic
Evidence
- Tampered Claude Code extension on Cursor's marketplace tried to plant a hidden remote-access backdoor Altered copies of the Claude Code extension were available on Cursor's marketplace for several hours on October 29, 2026. Microsoft says the hidden code tried to set up lasting… · Secquill@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/4715170