A tampered Claude Code extension was available on Cursor's marketplace for approximately 11 hours, during which it attempted to steal user data and establish remote access, affecting up to 5,000 users, according to The Decoder.
Upon discovering the issue, Cursor promptly took down its entire marketplace to prevent further risk and later restored service after confirming no additional threats remained, The Decoder reported.
This incident highlights the growing need for robust security measures in software marketplaces, an issue of increasing relevance for Japanese developers and investors monitoring global tech and cybersecurity trends.