cd /news/ai-safety/claude-code-backdoor-on-cursor-hit-5… · home › topics › ai-safety › article
[ARTICLE · art-161038] src=byteiota.com ↗ pub= topic=ai-safety verified=true sentiment=↓ negative

Claude Code Backdoor on Cursor Hit 5,000 Devs — Check Now

Cursor's marketplace distributed a trojanized Claude Code extension to roughly 5,000 developers over an 11-hour window, according to byteiota. The report details what the malware did and how developers can check whether they are affected. The incident matters because it exposed a supply-chain path through an AI coding tool's extension marketplace to thousands of developers.

read1 min views1 publishedOct 30, 2026

Cursor's marketplace served a trojanized Claude Code extension to ~5,000 developers for 11 hours. Here's what the malware did and how to check if you're affected.

The post Claude Code Backdoor on Cursor Hit 5,000 Devs — Check Now appeared first on byteiota .

source & further reading
byteiota.com — original article VS Code 1.144: Copilot Fusion GA, Computer Use, Agents pg_pinecone Brings Pinecone’s Search Engine Into Postgres GitHub Octoverse 2026: AI Agents Start 40% of Pull Requests
── more in #ai-safety 4 stories · sorted by recency
── more on @cursor 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/claude-code-backdoor…] indexed:0 read:1min 2026-10-30 · —