Cursor discloses malware in Claude Code extension distributed through its marketplace
What happened
On October 30, Cursor disclosed that a Claude Code VS Code extension distributed through its IDE marketplace had been modified to carry malware, affecting up to 5,000 users. The malicious version was not developed by Anthropic. Cursor took the marketplace offline that afternoon, worked with the relevant providers to remove the malware, and restored it after confirming no further risk. Cursor advises affected users to follow its blog post to check their systems and upgrade to Claude Code for VS Code 2.1.314.
Written by AI from the coverage · updated 1 hour ago
Coverage
Follow the reports to see the story from different sides.
- AI HOT · IndustryPickCursor says Claude Code VS Code extension was infected with malware, affecting up to 5,000 users
Cursor found that the Claude Code VS Code extension distributed through its IDE marketplace had been modified to carry malware, affecting up to 5,000 users. The malicious version was not built by Anthropic. Cursor took the marketplace offline that afternoon and brought it back after working with the relevant provider to remove the malware and confirm there was no further risk. Cursor advises affected users to follow its blog post to check their systems and upgrade to Claude Code for VS Code 2.1.314.
Heat over time
Not enough continuous observations to draw a trend yet.