Malicious Claude extension attempted data theft in marketplace
The Decoder: Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
A tampered Claude Code extension was live on the Cursor marketplace for about 11 hours, affecting up to 5,000 users. It tried to steal user data and set up remote access. Cursor took the entire marketplace offline and reinstated it after confirming there was no further risk. The article Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft appeared first on The Decoder.
Part of a story that several outlets report: Claude extension backdoored on Cursor marketplace for hours
Get smart on it
A malicious version of a Claude Code extension was available in a code editor's marketplace for approximately eleven hours, potentially affecting up to 5,000 users. The tampered extension attempted to collect user data including hostname, username, operating system, and public IP address, and tried to establish remote access for attackers, though this would have required admin privileges to succeed. The marketplace operator discovered the threat, removed the extension, took the marketplace offline to work with providers on neutralizing the malware, and confirmed no other extensions were compromised before reinstating it. Anthropic, the company behind Claude, had no involvement in developing the malicious extension.
Explainer: Why Cursor Is Training Its Own Trillion-Parameter AI Model
Relevant courses
Want to go deeper than the news? Explore live, cohort-based AI courses taught by practitioners.
Browse AI courses on MavenRelated news
Google is entirely disabling Search in schools that don’t want AI
Google is completely turning off Search in schools that reject its AI features, the company told The New York Times. The decision was also shared in a broader education-related update from Google on Tuesday, saying that access to Gemini, Gemini Notebook, Gemini in Classroom, and Google Search "will be entirely off" for K-12 student accounts unless "administrators explicitly turn them on." Administrators will not be given the option to toggle Gemini-powered features off without
Also reported by Ars Technica, TechCrunch and Wired AI
After the midterms, is the AI industry in for a rough two years?
Democrats’ historic victories in this week’s U.S. midterm elections could also transform the tech industry. The public voted on 41 data center-related ballot measures on Tuesday — in all but one, the majority voted to impose more restrictions on data center development. And even when data centers weren’t on the ballot directly, they were a […]
Big Tech lost big in the 2026 election
On Tuesday, millions of American voters went to the polls and voted overwhelmingly for Democrats and against AI. The fight against Big Tech is about to come roaring back, and the fight over data centers is looking even harder for the folks trying to build them. On this episode of The Vergecast, Nilay and David discuss what the 2026 midterms mean for the tech industry going forward. They dig into the self-quarantining echo chamber that is X, the congressional energy likely to b
Big Tech claims voters’ AI backlash is “anti-Trump” not “anti-tech”
Donald Trump’s big, rapid American AI buildout now faces a major slowdown as voters in yesterday’s elections overwhelmingly supported candidates and measures that favored increasing restrictions on AI and data centers nationwide. One resource from a polling firm, called Redbud Consulting, tracked data center initiatives on the ballot and reported that out of 44 measures across 10 states seeking to restrict data centers, 38 passed so far. Those measures included dozens of moratoriums and bans. An
China reportedly recruited AI exec to spy on Jensen Huang
China's intelligence agency recruited Megaspeed executive Alice Huang to spy on Nvidia CEO Jensen Huang, according to The New York Times. The Ministry of State Security (MSS) enlisted her to glean information about American AI chips and "potentially influence the company to push for its most advanced chips to be made available to China." Megaspeed is a customer of Nvidia's, and Alice Huang also has "relationships with executives at the highest levels of the A.I. chip industry,"
Also reported by TechCrunch
The US let Nvidia sell chips to an empty office in China
Concerns are being raised that neither the Commerce Department nor Nvidia are doing their due diligence when it comes to vetting Chinese firms cleared to handle the company's H200 AI chips. According to The New York Times, New Matrix is on the list of approved firms, yet its offices are empty, "a hollow gray shell with wires dangling from the ceiling where lights should be." In fact, the paper could find little evidence that the company exists in any meaningful way: Only scant