# clm_CB38AC85A186

subject: Cursor (/record/cursor.md)  
predicate: incident  
value: Malicious Claude Code extension versions  
valid_from: 2026-10-29  
valid_to: null  
published: 2026-10-29  
recorded: 2026-10-30  
confidence: 0.70  
status: valid  
assertable: true  
superseded_by: null  
last_updated: 2026-10-30  
checked: 2026-10-30 · its source page states the value and the date  

> Today we identified a security incident involving a specific extension in the Cursor VS Code Extension Marketplace: Anthropic.claude-code version 2.1.312 and 2.1.313 for Windows and MacOS . These malicious versions of the extension were not developed by Anthropic.

What https://cursor.com/blog/claude-code-extension-security-notice says, word for word.

## Sources

- https://cursor.com/blog/claude-code-extension-security-notice (primary, Cursor, published 2026-10-29)

---

AsOf is a temporal fact ledger: a structured, dated, sourced record of what is true and what changed, built for AI retrieval.