A tampered Claude Code extension was live on the Cursor marketplace for about 11 hours, affecting up to 5,000 users…

…and attempted to steal user data and set up remote access. Cursor took the entire marketplace offline and reinstated it after confirming there was no further risk.

AI-generated: summaries written by AI from the linked sources. How we use AI