Hackers Distribute Malicious Update for Claude Code

On October 29, 2026, hackers successfully distributed a malicious update for Claude Code, a programming assistant developed by Anthropic, through the Cursor extension store, affecting thousands of developers worldwide.

The compromised update was disguised as a legitimate software patch, tricking developers into installing it. The malicious code was designed to exploit vulnerabilities in the system, potentially compromising sensitive data and disrupting development processes.

Cursor, the editor that distributed the malicious update, has since acknowledged the breach and is working to mitigate the damage. The company has advised all affected users to immediately uninstall the compromised extension and revert to a previous, secure version of Claude Code.

Anthropic, the developer of Claude Code, has also released a statement condemning the attack and assuring users that they are collaborating with Cursor to enhance security measures and prevent future incidents. The company has urged developers to remain vigilant and follow best practices for software updates and security protocols.

This incident highlights the growing threat of cyberattacks targeting software developers and the critical need for robust security measures in the tech industry. As more developers rely on AI-assisted tools, the risk of such attacks increases, making it essential for companies to prioritize cybersecurity.