Malicious update to Anthropic's Claude VS Code extension on Cursor marketplace ran for nearly 12 hours
BREACHAnthropicredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Attackers placed a harmful version of an official Claude extension for the Cursor code editor on its marketplace. It may have reached as many as 5,000 developers, and the company has not yet warned its customers.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check whether the Claude extension in Cursor is version 2.1.313 and remove it if so.
- Update the extension to version 2.1.314 or later.
- Review Cursor's extension auto-update setting if you want to control future updates.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ars Technica (Security)
Who and what is in it
Companies