發生什麼事
@cursor_ai said a modified Claude Code VS Code extension had been distributed through the Cursor IDE marketplace, with up to 5,000 users affected. Cursor says Anthropic did not make the malicious edition and that other extensions from its marketplace were unaffected (🗣 self-reported). It took the marketplace offline and worked with the parties involved to neutralize the malware. Cursor reopened it only after confirming there was no further risk.
About two hours before Cursor's post, personal account @lukedewolf said Open VSX had listed version 2.1.313 under a name presented as official. The account said installing it would add an attacker's SSH key and a backdoor tunnel. The version and these effects come only from that account's statement and remain unverified (❔ unverified).
01Sources
- @cursor_ai: Cursor's official account, 2026-10-30 07:46 UTC (15:46 Taipei time); incident notice covering the modified Claude Code VS Code extension, up to 5,000 users, the marketplace's temporary closure and reopening, and the update request for 2.1.314
- @lukedewolf: personal account, 2026-10-30 05:47 UTC (13:47 Taipei time); says an Open VSX listing for 2.1.313 would add an SSH key and backdoor tunnel when installed