Cursor flags malicious Claude Code extension 2.1.313 in its marketplace
Cursor says a malicious version of the Claude Code extension was offered in its extension marketplace on October 29. Anyone who installed version 2.1.313 should check their setup.
Written by the SecurityTabs AI newsroom from the original posts by Cursor Blog (community feed), Socket Blog; vulnerability scores come from NVD, FIRST and CISA, not the AI.
Cursor published a security notice saying a malicious version of the Anthropic.claude-code extension, version 2.1.313, was identified in the Cursor Extension Marketplace. [1]
Socket's analysis of the disclosure says the extension was available through the marketplace on October 29 and could have affected up to 5,000 users. Socket says an earlier malware report had pointed to Open VSX, but its investigation found no matching publication or removal records there. Cursor's disclosure identified its own marketplace as the distribution source. [2]
Cursor has removed the extension from its marketplace, according to Socket. The notice excerpts available do not describe what the malicious code does. [2][1]