🚨 ALERT: Cursor reports a security incident involving a malicious Claude Code VS Code extension that may have affected up to 5,000 users.

First reported Oct 30, 2026, 10:30 UTC

Source reports

🚨 ALERT: Cursor reports a security incident involving a malicious Claude Code VS Code extension that may have affected up to 5,000 users. This malicious version of the extension was not developed by Anthropic. — @Cointelegraph (X), Oct 30, 2026, 10:30 UTC
🚨ALERT: Up to 5,000 users affected after a malicious Claude Code extension appeared on Cursor’s marketplace. Cursor is an AI coding tool that helps developers write and edit software. Users with auto-updates enabled could have downloaded it. Cursor says the malicious version was… — @coinbureau (X), Oct 30, 2026, 13:20 UTC

Excerpts are quoted from the linked sources, which own their text.