Malicious App Extensions Recommended by Popular AI IDEs
First seen 6 Jan 2026, 16:41 UTC
•
•87% similarity
•20
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A security flaw in AI-powered development environments Cursor, Windsurf, and Google Antigravity has exposed millions of developers to potential malware. These IDEs, which have over a million users combined, were found recommending non-existent extensions, leading to the risk of installing malicious software. All three tools are derived from VSCode and share similar configuration vulnerabilities.
ThreatCluster AI