Tech

A backdoor-enabled version of the Claude Code extension for VS Code has been released on the Cursor Marketplace.

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 30/10/2026, 18:34:25 UTC.

Briefings

A backdoor for Claude Code extensions was released on the Cursor marketplace, allowing remote access to developer laptops worldwide. The vulnerability was discovered by researchers and reported to Anthropic, but no official patch has been issued yet. This incident occurred in October 2026 and affects users of the Cursor platform who have installed the extension.

Key points

• A backdoor allowing remote access to Claude Code extensions was released on the Cursor marketplace in October 2026.
• The vulnerability was discovered by researchers and reported to Anthropic, but no official patch has been issued yet.

Context

Researchers discovered a backdoor in the Cursor extension for Claude Code, enabling remote access to developer laptops worldwide. The issue was reported to Anthropic, but no official patch has been issued yet. This incident occurred in October 2026 and affects users of the Cursor platform who have installed the extension.

Limitations

The evidence is limited to a single article and a few comments. No official patch information, user impact statistics, or specific dates of the vulnerability discovery are provided in the source material.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 30/10/2026, 18:41:16 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeianaa6wrljraurfm5csyj6wiqzkaw2inbeqhml5xtxaj4bj33643a