Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace

Cursor confirmed that a malicious Claude Code extension labeled version 2.1.313 was distributed through its marketplace on October 29, 2026, potentially affecting up to 5,000 users, after initial reports had incorrectly suggested Open VSX, npm, and the VS Code Marketplace were involved. The reported macOS artifact allegedly added an SSH authorized key, attempted to create a reverse SSH tunnel, and established persistence, though the original researchers acknowledged that its provenance and any compromise of Anthropic’s official infrastructure were not independently established. Socket found no Open VSX publication or removal record for version 2.1.313, despite the registry’s append-only change feed retaining records for rapidly removed releases, and npm metadata, GitHub releases, and changelogs also skipped the version. A screenshot presented as evidence of an Open VSX listing was considered inconclusive because its displayed Linux and Windows file sizes matched the legitimate 2.1.314 release and its timing did not prove continuous availability. Cursor removed the malicious extension, rotated keys and rebuilt its marketplace, helped take down attacker infrastructure, published package hashes and remediation guidance, and began directly notifying potentially affected users.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.