SecuritySecurityWeekabout 2 hours ago
Malicious Claude Code Extension Served in Cursor Attack
2 min read
On October 29, roughly 5,000 developer systems downloaded malicious versions of the Anthropic Claude Code extension via the Cursor marketplace. The compromised versions 2.1.312 and 2.1.313 contained code to establish reverse SSH tunnels, but admin rights prevented attackers from logging in. Cursor removed the extensions and suspended the store for investigation.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAnthropic
