Anthropic has reported that a malicious actor gained unauthorized access to its Cursor marketplace and published a tampered version of the Claude Code extension, a product it did not create or distribute. The incident highlights potential security vulnerabilities in software marketplaces and underscores the importance of robust security measures for developers and users alike.
According to a statement from Anthropic, the tampered extension could pose risks to users, potentially compromising their data or systems. The company is working to remove the unauthorized version and is advising users to disable the extension immediately if they have installed it.
“Security is a top priority for Anthropic,” said a spokesperson for the company. “We are taking this incident very seriously and are taking steps to secure our systems and prevent similar issues in the future.”
The incident also raises questions about the security measures in place for software marketplaces and the responsibility of platform providers to ensure the integrity of the extensions and apps listed on their platforms.
Anthropic is urging the community to stay vigilant and report any suspicious activity. The company is providing updates on its website and social media channels, and users are encouraged to follow these channels for further information.
Join the conversation and share your thoughts on the security incident involving the Claude Code extension.
Source: https://x.com/felixrieseberg
Thinking about building an AI product?
Get in Touch