Cursor 市场上的恶意 Claude Code 扩展尝试远程访问和窃取数据
Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
Cursor 市场上的恶意 Claude Code 扩展尝试远程访问和窃取数据，影响了高达 5000 名用户。该扩展试图收集用户的主机名、用户名、操作系统和公共 IP 地址，并尝试为攻击者设置远程访问，但 Cursor 表示这很可能在大多数机器上无法工作。Cursor 在发现后立即下架了该扩展并关闭了整个市场，在与提供者合作消除恶意软件并确认没有进一步风险后，市场已恢复。
Heads up if you recently installed the Claude Code extension for Cursor. A tampered version was available in the Cursor VS Code extension marketplace on Thursday for about eleven hours, affecting up to 5,000 users, according to the company. Anthropic had no involvement in developing it.
The extension tried to harvest user data like hostname, username, operating system, and public IP address. It also attempted to set up remote access for the attacker, though that likely wouldn't have worked on most machines since it requires admin privileges, Cursor says. Once discovered, Cursor pulled the extension and took the entire marketplace offline. After working with providers to neutralize the malware and confirming there was no further risk, the marketplace was reinstated. Cursor says no other extensions were affected.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
来源: The Decoder · the-decoder.com