Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish (Felix Rieseberg/@felixrieseberg)

Anthropic’s statement highlights a software supply-chain risk: a malicious actor abused Cursor’s marketplace to distribute a tampered Claude Code extension, creating potential exposure for organizations that rely on third-party AI coding tools. For CIOs and IT leaders, the key implication is that trust in app marketplaces and developer plugins must be treated as a security control, not an assumption—especially as AI assistants become embedded in software delivery workflows. This reinforces the need for tighter vendor governance, extension allowlisting, and rapid incident-response processes across engineering environments.