Cursor Neutralizes Malicious VS Code Extension Following Security Incident Affecting 5,000 Users
AI coding startup Cursor has reported a security breach involving a modified Claude Code VS Code extension. The malicious version was distributed through the Cursor IDE extension marketplace and successfully targeted approximately 5,000 users before being identified and neutralized. The incident highlights growing vulnerabilities within AI-integrated development environments (IDEs) and third-party marketplaces. While Cursor has taken steps to mitigate the threat, the breach underscores the security risks associated with automated coding tools and the potential for supply chain attacks targeting software developers.
Topics: AI coding tools cybersecurity malware software security
Read the full article at Seeking Alpha
Part of the story Cursor Reports Malicious Claude Code Extension Affecting Approximately 5,000 Users (2 articles)