5,000 用户受影响，恶意 Claude 代码扩展试图远程访问和窃取数据
一个篡改的claude代码扩展在cursor的市场中试图远程访问和数据窃取，影响多达5,000名用户。
a tampered version of the claude code extension was available in cursor's vs code extension marketplace on thursday for about 11 hours. the extension attempted to harvest user data like hostname, username, operating system, and public ip address. it also tried to set up remote access for the attacker, though that likely wouldn't have worked on most machines since it requires admin privileges. cursor says up to 5,000 users were affected. once discovered, cursor pulled the extension and took the entire marketplace offline.