Every article reads without JavaScript. Search and the newsletter form need it; plain-text editions are at /index.md and /llms.txt.

extensions

1

Piece

OCT 31, 2026

Last filed

Tagged extensions clear ×

A backdoored Claude Code extension shipped under Anthropic's real ID via Cursor's marketplace

For about 11 hours on October 29, Cursor's extension marketplace served a trojanized Claude Code extension under Anthropic's real publisher ID to up to 5,000 users, which means the usual advice to check the publisher could not have caught it.