Cursor has confirmed that a tampered version of the Claude Code extension for VS Code, listed as the official release, circulated through its marketplace for some time. The company published a security notice detailing the incident and urging users who installed the extension to check their systems and apply the recommended fixes. The alert gained wider attention after an independent blog post documented the initial discovery of the issue.
The episode highlights a now well-recognized risk within the developer tooling ecosystem: third-party extension marketplaces, while useful for quickly distributing plugins to a wide user base, also represent an attractive attack surface for inserting malicious code into tools developers rely on daily. A compromised extension can potentially execute arbitrary code on a user's machine, exfiltrate credentials or API keys, or quietly embed itself into automated workflows involving generative AI tools.
The Claude Code extension, built by Anthropic to bring its coding assistant directly into the editor, has seen growing adoption among engineering teams. That a falsified version managed to pass through a third-party marketplace — in this case Cursor's — raises questions about the verification and signing processes applied to extensions before they reach the public.
At this stage, technical specifics about the exact nature of the backdoor, its initial distribution vector, and its real-world impact remain limited to what Cursor has disclosed. The incident is nonetheless a reminder for organizations integrating AI tools into their development pipelines to scrutinize the origin and integrity of installed extensions, rather than relying solely on the displayed publisher name.