A fake add-on posing as Claude AI was caught giving hackers a hidden way in. It was live for 11 hours, so anyone who added it should check now.
A fake add-on that pretended to be Claude, the AI assistant made by Anthropic, was caught giving hackers a hidden way into users' computers. Cursor, a popular AI tool for writing software, spotted it. Reports say the fake was live for 11 hours, long enough for some people to install it.
An add-on, also called an extension, is a small program that plugs into another app to give it new features. This one used the Claude name to look trustworthy. Behind that label, it opened what reports describe as a secret door for hackers. A door like that can let outsiders reach a person's computer without them knowing.
The people most at risk use Cursor or other AI coding tools and add extensions to them. That is especially true for anyone who installed a Claude add-on recently. If you never added one, you can relax. Nothing in the reports suggests that people who skipped it are affected.
The material does not say how many people installed the fake. It also does not say who made it, what the hackers took, or whether any accounts were broken into. Those answers may come as the story develops.
The alert box above lists the steps. In short, check your installed add-ons, remove any you cannot trace to the real publisher, and act quickly if you installed one. The wider lesson is simple. A fake can look real, so check who made anything you install before you trust it with your work or accounts.
Watch for updates from Cursor and Anthropic. They may share more about how the fake got listed and who was affected.
Check your add-ons for any Claude extension you cannot trace to its real publisher, and remove it.
A new Alibaba-led test of real coding requests found the best AI agent fully finished just 26.4 percent of tasks, so human review still matters.
Read more: AI coding helpers fully finish only about 1 in 4 real tasksEA has re-released 25 classic PC games at a discount until November 19, and Bethesda has finally given The Elder Scrolls VI a subtitle: Sentinel.
Read more: EA brings 25 classic PC games back, and Elder Scrolls VI gets a nameA user says Anthropic's Claude Code put his email in web requests, then scam messages arrived. The link is unproven, but it shows what AI tools can share.
Read more: User says Claude Code sent his email address to websites
