{
  "id": 17284479,
  "title": "A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices",
  "url": "https://urgent.news/2026/10/30/a-supply-chain-attack-put-malicious-anthropic-claude-extensions-on",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-30T20:38:46.000Z",
  "source": {
    "name": "Wired",
    "slug": "wired",
    "url": "https://www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/"
  },
  "original_language": "en",
  "account": "A malicious Anthropic Claude Code extension for Windows, macOS, and Linux infiltrated the AI software-development platform Cursor's integrated development environment extension marketplace. This rogue extension, designed with a backdoor, was downloaded by “at most 5,000 users” for roughly 11 hours on Thursday before Cursor shut down the marketplace to investigate. The malware's design allowed attackers to gain access to victim devices, potentially serving as a stepping stone to deeper control inside a target network. However, a flaw in the malware's design blocked it from fully establishing itself on the vast majority of targets. Calum Hall, cofounder and CEO of detection firm Phorion, who first spotted the malicious extension, commented on the fortunate turn of events, stating that it was \"potentially a really dangerous foothold for an attacker\".\n\nThe source of the malicious extension remains unclear. While some researchers initially speculated that it came from a compromised Anthropic system, Cursor denied this claim in its security alert, stating that these malicious versions were not developed by Anthropic. Anthropic's technical staff member Felix Rieseberg echoed this sentiment, explaining in a post on X that a malicious actor used access to Cursor's marketplace to publish a tampered copy of the Claude Code extension. He added that Anthropic's official channels are not affected, and the incident did not involve a compromise of any Anthropic systems. Both Cursor and Anthropic have emphasized that their systems were not involved in the building, publishing, or hosting of the malware. However, Cursor has not provided WIRED with a comment regarding the incident or its potential causes.",
  "summary": "Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines.",
  "key_points": [
    "Malicious Anthropic Claude extension infiltrated Cursor's IDE marketplace",
    "Rogue extension downloaded by up to 5,000 users for 11 hours",
    "Attackers could gain device access, but malware was partially blocked"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}