The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A malicious version of the Claude Code AI extension was distributed through the Cursor code editor's marketplace, infecting up to 5,000 users across Windows, macOS, and Linux. The tampered extension installed SSH backdoors, enabling unauthorized access and data exfiltration. Cursor removed the extension and advised users to update and secure their systems.[AI generated]
Why's our monitor labelling this an incident or hazard?
The malicious Claude Code extension is an AI system component that was used maliciously to collect sensitive user information and install a backdoor for remote access, directly harming users' privacy and security. The incident affected 5,000 users, demonstrating realized harm. The AI system's misuse and malfunction (malicious code) directly led to this harm. Therefore, this qualifies as an AI Incident rather than a hazard or complementary information.[AI generated]