5,000 使用者受影響，惡意 Claude 程式碼擴充套件試圖遠端存取和竊取資料
一個竄改的claude程式碼擴充套件在cursor的市場中試圖遠端存取和資料竊取，影響多達5,000名使用者。
a tampered version of the claude code extension was available in cursor's vs code extension marketplace on thursday for about 11 hours. the extension attempted to harvest user data like hostname, username, operating system, and public ip address. it also tried to set up remote access for the attacker, though that likely wouldn't have worked on most machines since it requires admin privileges. cursor says up to 5,000 users were affected. once discovered, cursor pulled the extension and took the entire marketplace offline.