HighMalicious packageupdated 30 Oct 2026, 20:35 UTC
Trojanized Claude Code extension for Cursor IDE targets developers
Attacks reported (Dark Reading)1 source, unconfirmed
| Severity | HighMalicious package |
|---|---|
| Being exploited? | ReportedBy Dark Reading, not officially confirmed yet |
| What to do | Remove itSee the steps below |
| How sure is this? | 1 source, unconfirmedOnly one publisher so far, details may change |
Timeline
- 30 Oct 2026, 20:05 UTCPublicly disclosed
- 30 Oct 2026, 20:05 UTCReported by Dark Reading · Dark Reading
- 30 Oct 2026, 20:35 UTCPicked up by Zero Radar
Sources 1 report, oldest first
Security press established security newsrooms
- Devs Hit by Trojanized Claude Code Extension for CursorDark Reading · 30 Oct 2026, 20:05 UTC
Technical details
- ID
- ZR-ac7367a3
- Disclosed
- 30 Oct 2026, 20:05 UTC
- On Zero Radar
- 30 Oct 2026, 20:35 UTC (29 min after disclosure)
- Last change
- 30 Oct 2026, 20:35 UTC
This entry has not been explained yet. The text comes straight from the source. How Zero Radar works