Anthropic says a malicious actor used access
Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish
TL;DRFake Claude extension uploaded to Cursor marketplace by unauthorized actor.
Why it matters: Users could install malicious code thinking it's official; highlights supply chain risks in developer tools.
Anthropic says a malicious actor used access to Cursor's marketplace to publish a “tampered” copy of the Claude Code extension, which it didn't build or publish — We're working with Cursor on this incident, but it wasn't a compromise of Anthropic's systems or employee laptops. A malicious actor used access to Cursor's marketplace to publish a tampered copy of the Claude Code extension, which we didn't build or publish. The versions on our official channels a...
Read full articleSource: @felixrieseberg · Opens in new tab