Cursor Alerts About Malicious Claude Code Extension

Cursor warns of malicious versions of its Claude code extension in the VS Code Marketplace.

By Precis Daily NewsroomNovember 1, 20261 min read174 words

AI-summarized from the linked source and published automatically — not human-edited.How this works →

What happened

Cursor has issued a security alert about malicious versions of its Anthropic.claude-code extension available in the Cursor VS Code Extension Marketplace. The notice was published through the Google News site as part of a query-based feed.

The malicious versions of the extension are specifically tagged as 2.1.312 and 2.1.313. The article includes a direct link to the security notice for further details, formatted as an HTML anchor tag with a specific URL.

Why it matters

The discovery highlights potential risks to developers using the Cursor Marketplace, as malicious extensions could compromise user data or system security. Cursor, the publisher of the notice, emphasizes the importance of verifying extension sources to avoid security threats.

Key details

The notice was issued by Cursor, which is the publisher of the security alert. The Cursor VS Code Extension Marketplace is where the malicious versions were identified.

The article provides a direct link to the security notice for further details. The source material is attributed to Cursor, which is the publisher of the notice.