The Cursor official store has appeared with a malicious Claude Code plugin, affecting approximately 5000 developers for about 11 hours.
The Cursor plugin store was launched on October 29 with a tampered Anthropic Claude Code extension, version 2.1.313, lasting for about 11 hours, with the maximum number of downloads being approximately 5000 developers.
The incident provided the method of malicious plugin installation, the duration of impact, and the handling actions, allowing an understanding of the risks in the plugin supply chain of AI programming tools.
Same story1 other outlet also reported this
- Ars Technica · AI··First
Anthropic's Claude model VS Code extension 2.1.313 has a backdoor vulnerability threat to 5000 developers
- ITHome · AI··+8 h 27 min·Reading now
The Cursor official store has appeared with a malicious Claude Code plugin, affecting approximately 5000 developers for about 11 hours.
Adds:Cursor marketplace was temporarily closed.
In order of publication · later reports are added as they appear · Compared by AI from each outlet’s title and summary
Source: ITHome · AI · ithome.com