{
  "id": 17267814,
  "title": "Hackers hijacked a Claude Code extension, exposing yet another new AI security risk",
  "url": "https://urgent.news/2026/10/30/hackers-hijacked-a-claude-code-extension-exposing-yet-another-new-ai",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-30T17:29:12.000Z",
  "source": {
    "name": "Fast Company",
    "slug": "fast-company",
    "url": "https://www.fastcompany.com/91633244/hackers-hijacked-a-claude-code-extension-exposing-yet-another-new-ai-security-risk"
  },
  "original_language": "en",
  "account": "Hackers exploited a Claude Code extension, potentially exposing a new AI security risk. The malicious version of Anthropic's Claude Code extension, designed to run within Cursor, remained available on Cursor's VS Code marketplace for about 11 hours. The extension aimed to gather information about users' computers and install a persistent backdoor, attempting to access victims' machines via SSH even after removal. Cursor removed the compromised extension upon discovery, emphasizing that the attack was limited to Cursor users. However, the company urged those who installed the affected version to check their computers for signs of infection, remove unauthorized access, and consider changing potentially compromised credentials. The hackers' identities remain unknown, but this incident highlights the growing risk as AI coding tools become ingrained in developers' workflows. Security experts warn that such tools could be exploited in hybrid warfare, given their potential to reproduce malware across systems. The broader concern extends beyond individual computers to sensitive systems, with cybersecurity experts emphasizing the need to address the increased attack surface posed by AI coding assistants and their associated tools.",
  "summary": "The world can feel particularly unsafe these days, with AI agents running rampant within private networks and billions of dollars disappearing from crypto wallets in less time than it takes to watch a sitcom episode. But while the world was watching Binance’s massive crypto heist, another potentially consequential security breach was unfolding largely under the radar. For roughly 11 hours, a…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 7,
    "also_reported_by": [
      {
        "outlet": "XDA Developers",
        "title": "Claude Code is the best Linux tech support I've ever had",
        "url": "https://urgent.news/2026/10/29/claude-code-is-the-best-linux-tech-support-ive-ever-had",
        "published": "2026-10-29T18:00:20.000Z"
      },
      {
        "outlet": "Dev.to",
        "title": "Claude keeps saying \"load-bearing\", compaction keeps eating my \"stop saying that\", so I built a tool with Claude Code that makes the correction stick",
        "url": "https://urgent.news/2026/10/30/claude-keeps-saying-load-bearing-compaction-keeps-eating-my-stop",
        "published": "2026-10-30T07:33:09.000Z"
      },
      {
        "outlet": "Channel News Asia",
        "title": "Cursor says up to 5,000 users affected by tampered Claude Code extension",
        "url": "https://urgent.news/2026/10/30/cursor-says-up-to-5-000-users-affected-by-tampered-claude-code",
        "published": "2026-10-30T08:32:32.000Z"
      },
      {
        "outlet": "Lobsters",
        "title": "Backdoors in Claude Code for VS, Cursor official extensions",
        "url": "https://urgent.news/2026/10/30/backdoors-in-claude-code-for-vs-cursor-official-extensions",
        "published": "2026-10-30T11:04:55.000Z"
      },
      {
        "outlet": "The Register Science",
        "title": "Anthropic: That Claude Code extension compromise… couldn't be us",
        "url": "https://urgent.news/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us",
        "published": "2026-10-30T16:27:00.000Z"
      },
      {
        "outlet": "TechRadar",
        "title": "AI-generated code is still frequently failing security checks — with Claude and GPT-6 topping the leader board",
        "url": "https://urgent.news/2026/10/30/ai-generated-code-is-still-frequently-failing-security-checks-with",
        "published": "2026-10-30T18:10:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}