Cursor reports malicious modified Claude Code extension in its IDE marketplace
Overview
Cursor says a modified Claude Code VS Code extension distributed through its IDE extension marketplace affected at most 5,000 users.
Cursor says Anthropic did not develop the malicious version. Cursor took its extension marketplace down, worked with relevant providers to neutralize the malware, and reinstated the marketplace after confirming there is no further risk.
Cursor asks all customers to update to Claude Code for VS Code version 2.1.314. Cursor also says the incident does not affect other marketplace extensions, Grok Bot, Grok, or other SpaceXSI products.
Written by AI from the articles below · updated Oct 30, 4:12 AM ET
Check the sources:
Article timeline
The articles in this story. Times are ET.
Cursor@cursor_aiOfficialCursor reports malicious Claude Code VS Code extension affecting up to 5,000 usersAICursor says a modified Claude Code VS Code extension distributed through its IDE extension marketplace affected at most 5,000 users. Cursor says Anthropic did not develop the malicious version, and that the incident does not affect other marketplace extensions, Grok Bot, Grok, or other SpaceXSI products. Cursor took the marketplace down, neutralized the malware with relevant providers, and reinstated it, and asks users to update to Claude Code for VS Code version 2.1.314.
Heat Trend
Not enough continuous observations to show a trend yet.