Open Source & Tools

Malicious Claude Code extension in Cursor marketplace stole data for 11 hours

Original titleMalicious Claude Code extension in Cursor's marketplace attempted remote access and data theft

Outlet: The Decoder
Published: Oct 31, 2026
Importance: 3/5

Summary

A tampered Claude Code extension was live on Cursor's marketplace for approximately 11 hours, affecting up to 5,000 users. It attempted to steal user data and establish remote access before Cursor took the marketplace offline and restored it after confirming no further risk.

Original excerpt

A tampered Claude Code extension was live on the Cursor marketplace for about 11 hours, affecting up to 5,000 users. It tried to steal user data and set up remote access. Cursor took the entire marketplace offline and reinstated it after confirming there was no further risk. The article Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft appeared first on The Decoder.

#cursor

Read the original

See all →

Oct 9

Anthropic launches free AI security scans for open-source projects

Anthropic introduced OSS Scanner, offering open-source projects free periodic security vulnerability scans using its strongest models. The service provides fast, frequent scans but without human review of the model-generated reports.

The Verge AI +2 more

Oct 20

Amazon launches TorchNeuron to break Nvidia's PyTorch dominance

Amazon released TorchNeuron, a new development tool designed to reduce Nvidia's control over PyTorch, the free toolkit used to build most AI applications. The move aims to enable more developers to run AI workloads on alternative chips, including Amazon's own.

TechCrunch +1 more

Oct 21

Deepseek open-sources DeepInfer inference engine for fast, cheap model deployment

Deepseek released DeepInfer, the vLLM-based inference framework behind its V4.1-Flash model, as open-source software. The system cuts compute costs and energy use when running AI models, adding pricing pressure on Western providers like OpenAI and Anthropic.

The Decoder +1 more

Oct 23

Nvidia launches Minerva AIOps platform for AI factory observability

Nvidia launched Minerva, an AIOps platform that combines telemetry from infrastructure and AI workloads and applies purpose-built AI models to deliver actionable insights. It helps teams identify problems early and keep AI factories productive.

NVIDIA Blog