Development ·
Cursor identifies two malicious extension versions
Cursor identified and removed two malicious extension versions distributed through its marketplace.
Why it matters
Developer-tool distribution can introduce unwanted code into environments that hold source files and credentials. The notice provides specific versions and an exposure window.
What to watch
Further corrections to the exposure window, verified impact and marketplace safeguards.
Still uncertain. The scope and behavior are Cursor’s account. Attempted SSH persistence does not establish successful attacker access on every machine.
Impact assessment reviewed 2026-11-02.
- Who it helps
- Developers and security teams checking Cursor installations on macOS or Windows.
- Availability
- The public notice covers distribution on October 29, roughly 2:27 am–1:35 pm Pacific. Cursor says the packages were removed and the attacker server taken offline.
Scope of the report
Cursor says these packages were not developed by Anthropic. The notice reports host-information collection and attempted persistent SSH access, with no evidence that official distribution or other extension versions were affected.
Attempted access needs careful interpretation
Cursor says code errors and missing administrator privileges prevented the SSH step in typical configurations, while host details and persistence artifacts could still be created. The notice directs affected users to check and remediate their machines regardless.
What you can do
- Use the official notice to identify affected versions and current remediation guidance. Open reference ↗
Where the evidence stops
This is Cursor’s incident account, not an independent forensic examination. No malicious artifact or remediation script was executed here.
Sources read. Primary sources read November 2, 2026 UTC. No third-party software, model inference or complete workflow executed.
Sources & further reading
Web · paper
Cursor identifies two malicious extension versions ↗
Identifies the subject, documented capability or specific verification limit.
Cursor · page checked 2026-11-02
Coverage note: Independent attention and end-to-end execution remain unverified.
The record over time (1)
Dated source checks and published explanations. An observation date can differ from the original release date.
- · Added to Current
2026-10-29: Cursor identified and removed two malicious extension versions distributed through its marketplace.
Assessment: Developer-tool distribution can introduce unwanted code into environments that hold source files and credentials. The notice provides specific versions and an exposure window.