Picture: Illustration · BitBytec · Original illustration, BitBytec
The AI software-development platform Cursor, which is owned by SpaceX, had a malicious Anthropic Claude Code extension for Windows, macOS, and Linux live in its integrated development environment extension marketplace for roughly 11 hours on Thursday [1]. The company reported that the rogue extension was downloaded by "at most 5,000 users" [1].
Key facts * The tainted extension was designed with a backdoor to give attackers access to victim devices [1]. * Cursor briefly shut down the extension marketplace while investigating the situation [1]. * The company stated the incident did not impact any other extensions [1]. * A flaw in the malware's design blocked it from fully establishing itself on the vast majority of targets [1].
What does the malicious extension do? The rogue extension was designed with a backdoor to give attackers access to victim devices, which is a type of implant often used as a stepping stone to gain deeper control inside a target network [1]. Calum Hall, cofounder and CEO of the detection firm Phorion, noted that the extension was "potentially a really dangerous foothold for an attacker" [1].
Who was affected and how did it happen? At most 5,000 users across Windows, macOS, and Linux downloaded the malicious extension from the Cursor marketplace [1]. While some researchers initially speculated the extension came from a compromised Anthropic system, Cursor stated that "these malicious versions of the extension were not developed by Anthropic" [1]. Anthropic staff confirmed that a malicious actor used access to the Cursor marketplace to publish a tampered copy of the Claude Code extension, and that the versions on official Anthropic channels are not affected [1].
What are the remediation steps? Cursor published remediation steps on Thursday for the roughly 5,000 affected targets [1]. The company did not return requests for comment regarding how the malicious upload occurred or if the incident resulted from a breach at Cursor [1].
Sources
- A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices | WIRED — WIRED (primary source)
- In search of lost time | Nature — Nature
- High tech from Ancient Greece | Nature — Nature
Written with AI from the sources listed, checked against them before publishing.