Cursor Marketplace Malicious Claude Code Extension Incident
Understand the story
Cursor's VS Code extension marketplace briefly listed a tampered, malicious Claude Code extension, unrelated to Anthropic's official version — it was a tampered release published by a third party. According to The Decoder, the extension existed for about 11 hours on Thursday, affecting up to roughly 5,000 users. A follow-up report by Ars Technica added more details: the malicious version was 2.1.313, contained a backdoor, affected up to 5,000 developers, and was only fixed about 12 hours later by version 2.1.314. Regarding how long the extension was live, earlier reports said about 11 hours while later reports said nearly 12 hours — a slight discrepancy. The incident is still being monitored, with no further official investigation results or remediation details reported yet.
AI overview of reporting · Updated 1 h前
Reporting timeline
Explore different aspects of the story through its reporting.
- Ars Technica · AIAnthropic VS code extension on Cursor backdoored for nearly 12 hours
The VS Code extension for Anthropic's official Claude model was backdoored on the Cursor marketplace; the malicious version 2.1.313 affected up to 5,000 developers until version 2.1.314 fixed it about 12 hours later.
- The DecoderMalicious Claude Code extension in Cursor's marketplace attempted remote access and data theft
A tampered, malicious Claude Code extension appeared in Cursor's VS Code extension marketplace, was live for about 11 hours on Thursday, and affected at most 5,000 users. It is unrelated to Anthropic.
Story heat trend
Current heat19·Comparable peak19（10/31 06:00）·Comparable change over 24 hours –
The trend compares the same continuously observed sources, which may cover fewer sources than the current heat score. Hover or select the chart to inspect each hour; use the left and right arrow keys to navigate.