Claude Code extension: malicious 2.1.313 hit up to 5,000 Cursor users
Why it matters
Cursor says a maliciously modified Claude Code VS Code extension (Anthropic.claude-code 2.1.313), not developed by Anthropic, was available in its extension marketplace from about 2:27am to 1:35pm PT on Oct 29, 2026, affecting at most 5,000 users. It collected host details, added an attacker-controlled SSH key, tried to open a reverse SSH tunnel and installed persistence; Cursor says the attacker server is offline and on most macOS and Windows hosts the SSH step failed without admin rights. Cursor says it has no evidence that other versions of the extension or the official distribution are affected. Users should update to 2.1.314 and run Cursor's check, since uninstalling alone may not remove the persistence scripts.
Read the source: Cursor (security notice) (opens in a new tab)
All hits from 30 Oct 2026More SecurityGet the daily hits by email