Cursor Says Up to 5,000 Users Hit by Tampered Claude Code Extension: What US Developers Should Do
Cursor says a maliciously modified version of Anthropic’s Claude Code extension was live on its marketplace for about 11 hours on October 29, 2026, affecting at most 5,000 users. The company pulled it, rebuilt the marketplace, and urges users to update.