Malicious Claude Code extension removed from Cursor marketplace

On October 29, Cursor disclosed that Anthropic.claude-code 2.1.313 in its marketplace had been maliciously tampered with, and said the version was not developed by Anthropic. The malicious version collected host information and tried to install a persistent SSH backdoor. The disclosure covers where the extension came from, the host information collection and the backdoor attempt; the report describes an attempt and does not say whether it succeeded. As of publication, the extension had been removed and the attack server taken offline.

Written by AI from the coverage · updated 1 hour ago

Not enough continuous observations to draw a trend yet.