Cursor says Claude Code VS Code extension was infected with malware, affecting up to 5,000 users

Cursor 披露 Claude Code VS Code 扩展被植入恶意软件事件，最多影响 5000 用户

Cursor found that the Claude Code VS Code extension distributed through its IDE marketplace had been modified to carry malware, affecting up to 5,000 users. The malicious version was not built by Anthropic. Cursor took the marketplace offline that afternoon and brought it back after working with the relevant provider to remove the malware and confirm there was no further risk. Cursor advises affected users to follow its blog post to check their systems and upgrade to Claude Code for VS Code 2.1.314.

Why it matters: Cursor says the Claude Code extension in its marketplace was maliciously modified, and the malware incident affects up to 5,000 users.