The Cursor official store has appeared with a malicious Claude Code plugin, affecting approximately 5000 developers for about 11 hours.
The Cursor plugin store was launched on October 29 with a tampered Anthropic Claude Code extension, version 2.1.313, lasting for about 11 hours, with the maximum number of downloads being approximately 5000 developers.
Why it matters: The incident provided the method of malicious plugin installation, the duration of impact, and the handling actions, allowing an understanding of the risks in the plugin supply chain of AI programming tools.















