Your Cyber BriefYour Cyber Brief

Consumer Security Briefing

Cursor: Who to Contact in 60 seconds

October 31, 2026. Consumer Security Briefing: one item for people who installed a Claude Code add-on through Cursor on October 29.

Sources checked through Oct 31, 4:41 AM PDT. Published Oct 31, 7:42 AM PDT.

Who this affects Windows or Mac users who installed or updated the Claude Code add-on through Cursor between about 2:27 a.m. and 1:35 p.m. Pacific time on October 29, 2026; Cursor’s linked notice identifies the affected releases.

Watch on YouTube ↗

01

Item one: Help with a malicious programming add-on

Item one: a malicious programming add-on. Cursor is an app for writing computer programs. It offered a tampered Claude Code add-on October 29, about 2:27 a.m. to 1:35 p.m. Pacific. If you installed or updated it through Cursor on Windows or Mac then, it tried to leave a way back into your computer. Removing it alone may leave malicious files behind. Cursor says the attacker’s server is offline, but cleanup may still be needed. Not comfortable checking? Email security@cursor.com, the contact in Cursor’s notice, to ask about your installation and cleanup. You don’t need to tackle unfamiliar commands yourself.

Useful? Subscribe for your next briefing.