A backdoor was discovered in the 'Claude Code' VS Code extension distributed through the Cursor Marketplace, prompting an official security notice from Cursor. The incident highlights supply chain risks in third-party IDE extensions and has drawn significant attention on Hacker News with over 771 points and 483 comments.
Background
Cursor is an AI-powered code editor built on VS Code, and its marketplace hosts various extensions. This incident underscores growing concerns about the security of AI-related developer tooling and third-party extension ecosystems.
- Source
- Hacker News (RSS)
- Published
- Oct 30, 2026 at 03:09 PM
- Score
- 9.0 / 10