Cursor · incidentMalicious Claude Code extension versions

Valid from

2026-10-29

Valid until

still holds

Published

2026-10-29

Recorded by AsOf

2026-10-30

Checked

2026-10-30 · its source page states the value and the date

Confidence

0.70

Sources

“Today we identified a security incident involving a specific extension in the Cursor VS Code Extension Marketplace: Anthropic.claude-code version 2.1.312 and 2.1.313 for Windows and MacOS . These malicious versions of the extension were not developed by Anthropic.”— what the page says, read 2026-10-30

• Security notice — malicious version of Anthropic.claude-code (2.1.312 and 2.1.313) identified in the Cursor VS Code Extension Marketplaceprimary · cursor.com · 2026-10-29

/claim/clm_CB38AC85A186.md/v1/claims/clm_CB38AC85A186timelinesubmit a correction