Cursor Says Modified Claude Code Extension Incident Affected Up to 5,000 Users

Simon Yoon

1 min read

Add as a preferred source on Google

Cursor Says Modified Claude Code Extension Incident Affected Up to 5,000 Users

The incident involved a VS Code extension accessed through Cursor’s IDE extension marketplace.

By Simon Yoon

Published Oct 30, 2026, 4:22 AM EDT

A laptop screen shows rows of indistinct developer extensions / TokenPost.ai (macro)

Cursor said a modified Claude Code extension for VS Code was involved in a security incident affecting up to 5,000 users after it was accessed through Cursor’s IDE extension marketplace.

Simon Yoon

Reporter

Simon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.