https://www.live-feeds.com/feed/a-supply-chain-attack-put-malicious-anthropic-claude-extensions-on-thousands-of-devicesContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/a-supply-chain-attack-put-malicious-anthropic-claude-extensions-on-thousands-of-deviceshttps://www.live-feeds.com/feed/a-supply-chain-attack-put-malicious-anthropic-claude-extensions-on-thousands-of-devices#u181178Fri, 06 Nov 2026 12:21:16 +0000A software supply chain attack compromised the Cursor marketplace by distributing a malicious version of Anthropic's Claude Code extension, affecting up to 5,000 developer systems on Windows and macOS. The rogue extension remained active for roughly 11 to 12 hours. A flaw in the malicious code ultimately prevented the attacker from fully executing their backdoor strategy. Cursor confirmed the security incident, prompting defensive measures and updates across developer environments.Why it mattersThe incident highlights vulnerabilities in developer-focused AI tool marketplaces where extensi