Malicious Claude Code extension in the Cursor marketplace: Coralogix Security Advisory

Oct 30, 2026

The Claude Code extension in the Cursor marketplace was compromised for a short period of time today. Watch this security advisory from Chris Cooney and Hetram Yadav, threat detection and response manager at Coralogix, to understand:

How the malicious attack operates
How to know if you're affected
How Coralogix is supporting customers.

00:00 - Introduction

00:25 - What happened

01:17 - How the attack works

02:25 - How to know if you've been affected

03:18 - How Coralogix is supporting customers

04:40 - The advisory

05:09 - Indicators of compromise and queries

05:45 - What Anthropic has said