Claude Code Plugin Poisoned in Cursor Extension Marketplace OpenVSX
A Cursor security advisory reported that a tampered version, Anthropic.claude-code 2.1.313, appeared in the VS Code extension marketplace on October 29. This version was not developed by Anthropic and may have affected up to 5,000 users. Cursor has removed the version and temporarily shut down the entire marketplace.
Claude Code Plugin Poisoned in Cursor's OpenVSX Extension Marketplace
Cursor Security Notice: On October 29, a tampered version 2.1.313 of Anthropic.claude-code appeared in the VS Code extension marketplace. This version was not developed by Anthropic and affected up to 5,000 users.
The extension collected host information and attempted to implant a long-term SSH backdoor. However, because it required administrator privileges, tunneling failed on most hosts. Cursor has removed this version, temporarily shut down the entire marketplace, and brought it back online after rotating keys. The attacker's server has also been taken offline.
Cursor Security Notice: https://cursor.com/blog/claude-code-extension-security-notice