The AI coding tool, owned by SpaceX, reported that a modified version of Claude Code appeared on its extension marketplace between 5:27 AM and 4:35 PM ET on Thursday.
This extension harbors malicious code designed to collect sensitive information, such as hostname, username, operating system, home directory path, public IP address, and other data.
Cursor has immediately removed the malicious extension from its marketplace and confirmed that no other extensions were compromised.
The Editorial Staff at AIChief is a team of professional content writers with extensive experience in AI and marketing. Founded in 2025, AIChief has quickly grown into the largest free AI resource hub in the industry.
