AI Matters
Why it matters
Tampered Claude Code extension sat on Cursor's marketplace for 11 hours
The Decoder Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
A tampered Claude Code extension tried to steal data and set up remote access for up to 5,000 users before Cursor took its marketplace offline and restored it.
Why it matters
Developer tools you install can be a way in for data theft. Users of Cursor extensions should check what they installed.
Latest brief · Oct 31, 2026