{"version":"1.0","generated_at":"2026-10-31T22:47:53.776371","id":3707,"slug":"malicious-claude-code-extension-in-cursor-s-marketplace-attempted-remote-access-and-data-theft","title":"Cursor 市场中的恶意 Claude Code 扩展试图远程访问并窃取数据","summary":"Cursor 称，Cursor VS Code 扩展市场周四出现被篡改的 Claude Code 扩展，持续约 11 小时，影响最多 5000 名用户；该扩展试图收集主机名、用户名、操作系统和公网 IP 地址，并尝试建立远程访问，但多数机器因需要管理员权限而可能未成功。Anthropic 未参与开发，Cursor 已下架该扩展并短暂下线整个市场，确认无进一步风险后恢复。","abstract":"Cursor 市场中的恶意 Claude Code 扩展试图远程访问并窃取数据 Cursor 称，Cursor VS Code 扩展市场周四出现被篡改的 Claude Code 扩展，持续约 11 小时，影响最多 5000 名用户；该扩展试图收集主机名、用户名、操作系统和公网 IP 地址，并尝试建立远程访问，但多数机器因需要管理员权限而可能未成功。Anthropic 未参与开发，Cursor 已下架该扩展并短暂下线整个市场，确认无进一步风险后恢复。 Cursor 称，Cursor VS Code 扩展市场周四出现被篡改的 Claude Code 扩展，持续约 11 小时，影响最多 5000 名用户；该扩展试图收集主机名、用户名、操作系统和公网 IP 地址，并尝试建立远程访问，但多数机器因需要管理员权限而可能未成功。Anthropic 未参与开发，Cursor 已下架该扩展并短暂下线整个市场，确认无进一步风险后恢复。 原贴提到：Heads up if you recently installed the Claude Code extension for Cursor. 来源：the-decoder.com 如果你最近安装了 Cursor 的 Claude Code 扩展，请注意。据公司称，周四在 Cursor VS Code 扩展市场中有一个被篡改的版本可下载，持续约 11 小时，影响最多 5,000 名用户。Anthropic 未参与其开发。该扩展试图收集主机名、用户名、操作系统和公网 IP 地址等用户数据。Cursor 表示，它还试图为攻击者建立远程访问，但由于需要管理员…","access_level":"member","access_label":"免费阅读","access_mode":"full","is_preview":false,"canonical_url":"https://opc.beizhux.com/content/3707/malicious-claude-code-extension-in-cursor-s-marketplace-attempted-remote-access-and-data-theft","html_url":"https://opc.beizhux.com/content/3707/malicious-claude-code-extension-in-cursor-s-marketplace-attempted-remote-access-and-data-theft","json_url":"https://opc.beizhux.com/content/3707/malicious-claude-code-extension-in-cursor-s-marketplace-attempted-remote-access-and-data-theft.json","published_at":"2026-10-31T02:16:10","updated_at":"2026-10-31T22:12:46","category":{"slug":"ai-business","name":"AI小生意项目库"},"source":{"site":"the-decoder.com","author":"Matthias Bastian","url":"https://the-decoder.com/malicious-claude-code-extension-in-cursors-marketplace-attempted-remote-access-and-data-theft/"},"tags":["AI 编程","AI编程","AI编程工具","Claude Code","Cursor","供应链安全","扩展市场","数据窃取"],"topics":[{"slug":"agent-workflow","name":"Agent工作流","url":"https://opc.beizhux.com/topics/agent-workflow","reason":"这篇内容命中「Claude Code、Cursor、AI编程」等主题信号。"},{"slug":"ai-side-business","name":"AI副业","url":"https://opc.beizhux.com/topics/ai-side-business","reason":"这篇内容命中「项目、小生意、变现」等主题信号。"},{"slug":"ai-tools","name":"AI工具","url":"https://opc.beizhux.com/topics/ai-tools","reason":"这篇内容命中「工具、Cursor、Claude」等主题信号。"}],"keywords":["AI小生意项目库","Agent工作流","AI副业","AI工具","工具","自动化","模型","Cursor","Claude","Agent","智能体","工作流"],"questions":[{"question":"Cursor 市场中的恶意 Claude Code 扩展试图远程访问并窃取数据主要讲什么？","answer":"Cursor 称，Cursor VS Code 扩展市场周四出现被篡改的 Claude Code 扩展，持续约 11 小时，影响最多 5000 名用户；该扩展试图收集主机名、用户名、操作系统和公网 IP 地址，并尝试建立远程访问，但多数机器因需要管理员权限而可能未成功。Anthropic 未参与开发，Cursor 已下架该扩展并短暂下线整个市场，确认无进一…"},{"question":"这篇文章最值得关注的要点是什么？","answer":"Cursor 称，Cursor VS Code 扩展市场周四出现被篡改的 Claude Code 扩展，持续约 11 小时，影响最多 5000 名用户；该扩展试图收集主机名、用户名、操作系统和公网 IP 地址，并尝试建立远程访问，但多数机…；原贴提到：Heads up if you recently installed the Claude Code extension for Cursor.；来源：the-decoder.com"},{"question":"这篇文章和哪些AI专题相关？","answer":"它适合放在Agent工作流、AI副业、AI工具专题里阅读。 关联原因：这篇内容命中「Claude Code、Cursor、AI编程」等主题信号。；这篇内容命中「项目、小生意、变现」等主题信号。；这篇内容命中「工具、Cursor、Claude」等主题信号。"},{"question":"阅读这篇文章建议先理解哪些关键词？","answer":"建议先理解AI工具、工具、自动化、模型、Cursor这些关键词，再结合正文判断工具、机会或风险是否值得进入自己的工作流。"}],"terms":[{"slug":"ai-tools-term","name":"AI工具","definition":"在AI觉醒星球里，「AI工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/ai-tools-term","path":"/glossary/ai-tools-term","json_url":"https://opc.beizhux.com/glossary/ai-tools-term.json"},{"slug":"tools","name":"工具","definition":"在AI觉醒星球里，「工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/tools","path":"/glossary/tools","json_url":"https://opc.beizhux.com/glossary/tools.json"},{"slug":"automation","name":"自动化","definition":"在AI觉醒星球里，「自动化」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/automation","path":"/glossary/automation","json_url":"https://opc.beizhux.com/glossary/automation.json"},{"slug":"ai-model","name":"模型","definition":"在AI觉醒星球里，「模型」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/ai-model","path":"/glossary/ai-model","json_url":"https://opc.beizhux.com/glossary/ai-model.json"},{"slug":"cursor","name":"Cursor","definition":"在AI觉醒星球里，「Cursor」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/cursor","path":"/glossary/cursor","json_url":"https://opc.beizhux.com/glossary/cursor.json"},{"slug":"claude","name":"Claude","definition":"在AI觉醒星球里，「Claude」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/claude","path":"/glossary/claude","json_url":"https://opc.beizhux.com/glossary/claude.json"},{"slug":"agent","name":"Agent","definition":"在AI觉醒星球里，「Agent」属于「Agent工作流」方向。聚合Agent、AI编程、Claude Code、Cursor、工作流自动化等内容，帮助你把智能体能力落到真实任务链路。 把智能体当成任务系统，而不是聊天窗口。","topic_slug":"agent-workflow","topic_name":"Agent工作流","topic_title":"Agent工作流：智能体、AI编程与自动化协作","topic_url":"https://opc.beizhux.com/topics/agent-workflow","topic_path":"/topics/agent-workflow","url":"https://opc.beizhux.com/glossary/agent","path":"/glossary/agent","json_url":"https://opc.beizhux.com/glossary/agent.json"},{"slug":"ai-agent","name":"智能体","definition":"在AI觉醒星球里，「智能体」属于「Agent工作流」方向。聚合Agent、AI编程、Claude Code、Cursor、工作流自动化等内容，帮助你把智能体能力落到真实任务链路。 把智能体当成任务系统，而不是聊天窗口。","topic_slug":"agent-workflow","topic_name":"Agent工作流","topic_title":"Agent工作流：智能体、AI编程与自动化协作","topic_url":"https://opc.beizhux.com/topics/agent-workflow","topic_path":"/topics/agent-workflow","url":"https://opc.beizhux.com/glossary/ai-agent","path":"/glossary/ai-agent","json_url":"https://opc.beizhux.com/glossary/ai-agent.json"}],"preview_hidden_sections":[],"related_items":[{"id":3702,"title":"阿里巴巴与Apple合作，千问集成至Apple智能，11月4日开放测试","url":"https://opc.beizhux.com/content/3702/apple-apple-11-4","summary":"阿里巴巴宣布与Apple合作，将千问集成至Apple智能，中国用户可在Siri、写作工具及视觉智能中调用千问的文本与图像理解、内容生成能力；功能11月4日起随iOS开发者Beta开放测试，12月正式推出，用户可自主开通且请求与回复不用于模型训练。","access_level":"member"},{"id":3701,"title":"正在用 Agents API 构建？OpenAI 开发者账号预告本周交付内容","url":"https://opc.beizhux.com/content/3701/building-with-the-agents-api-here-s-what-we-shipped-this-week-for-you","summary":"OpenAI 开发者官方账号发布一句话推文，面向正在使用 Agents API 的开发者，提示本周有新的交付内容，但原文未披露具体功能、版本号或时间表。","access_level":"member"},{"id":3703,"title":"Wiz 报告“黑色十月”：九个 AI 开发者平台接连披露安全事件","url":"https://opc.beizhux.com/content/3703/wiz-ai","summary":"Wiz 梳理 10 月至少九个 AI 开发者平台披露的安全事件，涉及凭据窃取、agent swarm 攻击及以“蒸馏”为目的的窃取。","access_level":"member"}],"usage_policy":{"summarizable":true,"preferred_url":"https://opc.beizhux.com/content/3707/malicious-claude-code-extension-in-cursor-s-marketplace-attempted-remote-access-and-data-theft","private_fields_excluded":true}}