The unauthorized software was actively distributed on Thursday between 2:27 a.m. PT and 1:35 p.m. PT on the Cursor VS Code extension marketplace. It tried to harvest sensitive telemetry including public IP addresses, operating systems, usernames, and hostnames while seeking remote access. However, Cursor noted that remote access attempts would fail on most systems because the script required administrator privileges to proceed. Following an emergency shutdown, the marketplace was completely rebuilt and brought back online.
Key points
Cursor completely rebuilt and restored its marketplace after removing the unauthorized Cl…: Cursor completely rebuilt and restored its marketplace after removing the unauthorized Claude Code add-on.
The security incident was strictly confined, with no other extensions on the marketplace…: The security incident was strictly confined, with no other extensions on the marketplace suffering any impact.
Up to 5,000 developers running the coding tool were affected prior to the marketplace's t…: Up to 5,000 developers running the coding tool were affected prior to the marketplace's temporary shutdown.
Sources checked by our analysis pipeline: 1
Oct 30 : Cursor, the coding-tool company owned by SpaceX, said on Friday that a maliciously modified version of Anthropic’s Claude Code extension was available on its Cursor VS Code extension marketplace on Thursday, affecting up to 5,000 users.
Here are some details:
• Cursor said the extension was not developed by Anthropic and the maliciously modified extension was live on the marketplace from about 2:27 a.m. PT to 1:35 p.m. PT on Thursday
• The extension attempted to collect host and user information such as hostname, username, operating system and public IP address
• It also attempted to set up remote access for the attacker; Cursor said a key step would have failed on most machines because it requires administrator rights
• Upon detection, Cursor removed the malicious version and blocked its distribution and shut down the marketplace as a precaution
• The company then rebuilt the marketplace and brought it back online, it said
• Cursor said the incident did not impact other extensions on its marketplace
• Anthropic did not immediately respond to a request for comment
Backed by chip giant Nvidia, the neocloud firm is navigating mounting obstacles as it attempts to bring a massive computing hub to the region. The venture represents a major operational commitment that is now threatened by community pushback and building complications. Securing ongoing capital has also become an urgent concern as project hurdles accumulate.
A 2015 lunch at SpaceX's canteen brought together key figures from DeepMind, Google, and SpaceX following the initial assembly of a mandated ethics board. The discussion highlights how early tech industry leaders debated long-range autonomous space exploration and artificial intelligence governance. These foundational interactions shaped relationships among executive figures who subsequently went on to build competing artificial intelligence ventures.
The transition to foldable hardware proved unsustainable for a developer who abandoned the £2,000 device after less than a week of testing. Substantial compromises in daily usability and premium authentication outweighed the benefits of having an adaptable, dual-screen form factor. Ultimately, the user decided to switch back to a conventional flagship model, the iPhone 18 Pro Max.