Trojanized Claude Code Extension Targets Cursor Users in Supply-Chain Attack

A malicious, trojanized version of the Claude Code extension was distributed to Cursor IDE users, marking a supply-chain attack on AI-powered development tools. The same day saw a second security incident affecting Cursor, underscoring the growing attack surface of AI-integrated IDEs. The scope of affected users and the attacker's objectives remain unclear, but the incident signals elevated risk for developer toolchains.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works