Malicious Claude Code extension now present in the official Cursor plugin marketplace; impacted up to 5,000 developers over an approximate 11-hour window.
A tampered version of the Anthropic Claude Code extension (version 2.1.313) appeared in the official Cursor plugin marketplace on October 29, distributed for approximately 11 hours and downloaded by up to 5,000 developers.
Return to original text
A short introduction is retained here; the full text from the source website is not reposted. For specific wording and subsequent updates, please refer to the original article.
Open AIHOT original