# Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft

**Published:** October 30, 2026
**Author:** Matthias Bastian
**Source:** The Decoder
**Language:** en-US
**HTML:** https://aiqazaqstan.com/en/articles/malicious-claude-code-extension-in-cursor-s-marketplace-attempted-remote

A tampered Claude Code extension was live on the Cursor marketplace for about 11 hours, affecting up to 5,000 users. It tried to steal user data and set up remote access. Cursor took the entire marketplace offline and reinstated it after confirming there was no further risk. The…

> From the original source: **The Decoder**
> [Read full article at The Decoder](https://the-decoder.com/malicious-claude-code-extension-in-cursors-marketplace-attempted-remote-access-and-data-theft/)

**Tags:** #Anthropic

---

*AI Qazaqstan — non-commercial informational portal about AI in Kazakhstan. Machine translations and summaries are AI-generated.*