Skip to main content

AI news

Cursor warns that two tampered Claude Code extensions reached its marketplace

Cursor says tampered versions 2.1.312 and 2.1.313 of the Claude Code extension were available in its extension marketplace for macOS and Windows for part of October 29. The packages attempted to install a persistent SSH backdoor. Cursor removed them and published checks and remediation steps. Microsoft’s independent analysis says its VS Marketplace and the official npm package were not affected; the malicious versions were not made by Anthropic.

Cursor

Cursor extension marketplace security incident

Policy & Trust

Published (date only)

Updated

2 sources

Primary source · Cursor · October 29, 2026

Opens Cursor in a new tab. Read it there before you rely on the summary above.

Read the original

Free, email only

Unlock the full brief free.

  • What to check before you trust this story, written down
  • Each verified source, with why it matters and who published it
  • A note whenever a source has been withdrawn
  • Thirty days of stories to browse, not seven
Continue with Google and subscribeContinue with Apple and subscribe

Continuing subscribes the email on that account to Work Worth Doing, my newsletter, the same as the form below, and unlocks every free tool in this browser. We only receive your email address. Unsubscribe in one click.

This is not an account: there is no password, and the unlock is a cookie in this browser. You also join Work Worth Doing, Demetri Panici's newsletter, every week: what I built and what changed in AI. We'll email you a link to confirm, and you can unsubscribe in one click. The same signup unlocks every free tool on the site. How your email is handled.

Already subscribed? Enter the same email to unlock this browser. You won't be signed up twice.