Cursor 市场现恶意 Claude Code 扩展，试图远程访问并窃取数据
原标题：Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
AI 摘要
Cursor 的 VS Code 扩展市场中出现了一个被篡改的 Claude Code 扩展，该扩展在周四上架约 11 小时，影响最多 5000 名用户。该扩展试图收集主机名、用户名、操作系统和公网 IP 等用户数据，并尝试为攻击者建立远程访问，但由于需要管理员权限，在多数机器上可能无法成功。Cursor 发现后下架该扩展并暂时关闭整个市场，确认无进一步风险后恢复，并表示其他扩展未受影响。Anthropic 未参与该扩展的开发。
正文节选
Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft Heads up if you recently installed the Claude Code extension for Cursor. A tampered version was available in the Cursor VS Code extension marketplace on Thursday for about eleven hours, affecting up to 5,000 users, according to the company. Anthropic had no involvement in developing it. The extension tried to harvest user data like hostname, username, operating system, and public IP address. It also at