{"data":{"id":"2829eba8-5bad-4a03-b776-044a2afbca30","title":"A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices","summary":"A tampered Anthropic Claude Code extension was live in Cursor's IDE extension marketplace for roughly 11 hours on Thursday, and Cursor says at most 5,000 users downloaded it. The extension carried a backdoor, but a flaw in its design kept it from fully establishing itself on most targets. Anthropic says it did not build, publish or host the malicious copy and that its own systems were not compromised, while how the upload reached the marketplace remains unclear.","solution":"Cursor published remediation steps for the affected users on Thursday. The source does not state their content.","labels":["security","industry"],"sourceUrl":"https://www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/","publishedAt":"2026-10-30T20:38:46.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code","Claude","Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-30T20:38:46.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"]}}