Topic
Cursor is a code editor that integrates AI tools for development. Hitechreports covers its marketplace security issues, including a malicious extension and comparisons with other AI coding tools.
A trojanized version of the official Claude Code extension lived in Cursor's IDE marketplace for roughly 11 hours on Thursday. Cursor says at most 5,000 users downloaded it. The malware contained a backdoor but a coding error prevented it from fully installing on the vast majority of machines. Anthropic confirms its own infrastructure was not compromised.
A malicious version of the Claude Code extension sat on Cursor's VS Code marketplace for roughly 11 hours, reaching up to 5,000 developers with a persistent SSH backdoor. Anthropic denies any breach of its own systems.
A hands-on experiment running Claude Code, Codex and Cursor on the identical Claude Sonnet 5.5 model found the underlying AI produced near-identical fixes, but each coding tool diverged sharply on testing habits, code restructuring and even language choice.