Trojanized Claude Code Extension Exposes Cursor Marketplace Supply-Chain Gaps
A tampered build of Anthropic’s Claude Code extension sat inside Cursor’s extension marketplace for roughly eleven hours on October 29, and as many as 5,000 developers may have downloaded it. The rogue package did not come from Anthropic’s build pipeline; it was a modified copy published through the editor vendor’s store, and it tried to … Read more