VQV Signal
A security notice on Cursor's blog says a malicious extension posing as Claude Code was found in the Cursor marketplace. The source is linked from a Hacker News discussion with 10 points and 1 comment. The provided material does not include further details on the extension's behavior, how many users were affected, or when it was removed. The notice is the primary reference for the report.
A security notice on Cursor's blog says a malicious extension posing as Claude Code was found in the Cursor marketplace. The source is linked from a Hacker News discussion with 10 points and 1 comment. The provided material does not include further details on the extension's behavior, how many users were affected, or when it was removed. The notice is the primary reference for the report.
AI-assisted summary based on the listed source.
Developers who install extensions in Cursor could be exposed if they pick up a fake Claude Code package from the marketplace. Teams should check which extensions are installed on their machines and confirm they match the official publisher. Watch Cursor's blog for follow-up details on the scope of the issue and any recommended removal steps.
VQV organizes public signals from inspectable sources. It does not independently verify the underlying report.
Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.
Claude has a source-backed security with coverage spanning for developers.
VQV surfaced this signal because it is recent, relevant to AI Coding Tools, connected to Hacker News.
No login, cookies, social SDKs, or automatic posting.
