Malicious Claude Code extension versions found in Cursor
Prepared by Sintelligent with the help of SI. Published in SI: . Updated: .
Installing a familiar extension from an editor’s marketplace became a route into developers’ machines.
According to Cursor’s notice, versions 2.1.312 and 2.1.313 for Windows and macOS attempted to install persistent remote access through SSH. They were distributed for around 11 hours on October 29; Anthropic did not develop the malicious changes. Cursor removed the versions and disabled the attacker’s server, then clarified affected versions and compromise indicators on October 30.
Sources 2