Cursor post-mortem: leaked vendor key let a poisoned Claude Code extension reach ~5,000 users
Cursor has released its full post-mortem on a supply-chain incident it first disclosed on October 29. The root cause was a leaked vendor key. Attackers used it to publish a malicious, unauthorized copy of Anthropic's Claude Code extension into Cursor's extension marketplace, which serves VS Code-compatible extensions to the Cursor editor. Roughly 5,000 users installed or were exposed to the tampered package before it was taken down.
The mechanism is a classic marketplace trust failure, aimed at a new and valuable target. AI coding extensions are unusually powerful. They read whole repositories, run shell commands, and often hold API keys and cloud credentials in the same environment. A poisoned copy of a trusted agent extension therefore gives an attacker a ready-made foothold on developer machines. The leaked key let the fake package look legitimate, so users had little reason to doubt it.
The incident fits a week in which the security of agentic tooling came up again and again. Amazon Threat Intelligence reported criminals running live campaigns with the open-source ARTEX agent framework. AWS also pitched Nitro Sandboxes as hardware-enforced isolation for code that agents generate and run. Extension marketplaces outside Microsoft's official VS Code store, used by forks like Cursor, have long been criticized for weaker vetting, and this case adds a concrete casualty count to that critique.
Caveats: the detailed write-up available to us is a third-party explainer on dev.to, not Cursor's original post, so specifics such as what the payload did and which credentials were taken should be checked against Cursor's own disclosure. Affected developers should rotate any credentials that were present on machines running the fake extension. The bigger question is whether editor vendors will add publisher signing tied to the original author, such as Anthropic, so a stolen distribution key alone can't impersonate a first-party agent.