Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace
Cursor has confirmed that a malicious Claude Code extension labeled version 2.1.313 was available through its extension marketplace on October 29, potentially affecting up to 5,000 users. The disclosure identifies the distribution source behind a malware report initially attributed to Open VSX, where Socket’s investigation found no corresponding publication or removal records.
Summary from Socket Blog.
Related coverage
Other sources covering the same vulnerabilities or event.