Cursor 扩展市场出现恶意 Claude Code 扩展，最多波及 5000 名用户
Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
- 1Cursor 扩展市场上架了被篡改的 Claude Code 扩展，周四上线约 11 小时后下架
- 2Cursor 称最多 5000 名用户受影响，恶意扩展试图收集主机名、用户名、操作系统和公网 IP
- 3该扩展还尝试为攻击者建立远程访问，Cursor 称因需要管理员权限，多数机器上大概率不会成功
- 4发现后 Cursor 下架扩展并让整个市场离线，清除恶意软件确认无进一步风险后重新上线
AI 编程工具的扩展市场暴露出供应链攻击面，上架审核与应急下架的速度直接决定使用这些工具的企业的风险敞口。
- 影响：开发者机器连接代码库与凭证，恶意扩展可直接读取主机名、用户名和公网 IP 等环境信息；事件从上架到下架持续约 11 小时，AI 工具市场的暴露窗口以小时计；远程控制在多数机器上需管理员权限，开发机的权限配置会影响实际损害程度。
- 参考：可考虑盘点团队在用的 AI 编程扩展清单，核对安装来源与上架时间；值得检查开发机是否以管理员权限运行编辑器；也可把扩展市场的安全事件响应记录纳入工具选型评估。
- 依据：事件经过、影响人数与远程访问受阻原因均为 Cursor 官方口径，暂无独立验证；文中说明 Anthropic 未参与该扩展开发。
Heads up if you recently installed the Claude Code extension for Cursor. A tampered version was available in the Cursor VS Code extension marketplace on Thursday for about eleven hours, affecting up to 5,000 users, according to the company. Anthropic had no involvement in developing it.
The extension tried to harvest user data like hostname, username, operating system, and public IP address. It also attempted to set up remote access for the attacker, though that likely wouldn't have worked on most machines since it requires admin privileges, Cursor says. Once discovered, Cursor pulled the extension and took the entire marketplace offline. After working with providers to neutralize the malware and confirming there was no further risk, the marketplace was reinstated. Cursor says no other extensions were affected.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
来源：The Decoder：AI News · the-decoder.com