Skip to main content
Apexward Pulse
Type Incident

Anthropic Claude

Cursor confirms security breach led to malicious Claude Code extension

1 source

At a glance

Low
30-day window, from the last update
Evidence-weighted, not popularity
Why Low

Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.

Briefing

There is no written leader briefing for this story yet. These questions come from the facts we hold.

Questions to ask IT

  • Do we use Anthropic Claude, and has anything unusual been seen on it?
  • Would our monitoring spot an attack like this, and who would we call if it did?

Next steps

  1. Confirm whether the affected organisation is a supplier or partner, and what contingency exists

Summary

  • Cursor confirmed a security breach that allowed hackers to distribute a malicious Claude Code extension via its marketplace after credentials were stolen from Fireworks AI.

Read the original reportBleepingComputer(opens in a new tab)

Products and services involved

Pulse

Last change 8h ago · Recheck overdue since 14 Nov 2026, 21:04 UK time

  1. Story14 Nov 2026, 19:04 UK time · 8h ago

    Linked reporting from BleepingComputer (independent original reporting).

    Read source (BleepingComputer)

1 entry so far. The timeline chart appears once this story has more history.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline60% confidence

    Cursor confirms security breach led to malicious Claude Code extension

  • ProbableSummary fact75% confidence

    Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI.