Fake Claude Code Extension Listed on Cursor Marketplace for 11 Hours
11/05/2026 — 11/05, 21:20·1 sources (all)·1 reports (all)
Key takeaways
- A tampered Claude Code extension version 2.1.313 appeared in Cursor's VS Code marketplace on October 29, not an official Anthropic build. It…
- Cursor removed the extension, rotated keys, and shut down the marketplace.
Background & analysis
According to a DEV Community post published on November 5, 2026, a tampered build of the Claude Code extension, version 2.1.313, appeared in Cursor's VS Code extension marketplace on October 29. The build was not an official Anthropic release. Reporting says it was live for roughly 11 hours, from about 2:27am to 1:35pm PT, and that up to 5,000 users may have installed it during that window. The malicious version reportedly tried to plant a persistent SSH backdoor. Cursor then removed the extension, rotated keys, and shut down the marketplace. The article does not say whether Anthropic was involved in the response or what investigation followed.
AI-generated from 1 reports · updated 5 hours ago
Related AI tools
- Heat index
- 84
- All sources
- 1
- All reports
- 1
- First seen
- 6 hours ago
Reports on this story headlines open the original
A tampered build of Anthropic's Claude Code extension, version 2.1.313, appeared in Cursor's VS Code extension marketplace on October 29, staying live for about 11 hours and potentially reaching up to 5,000 users, according to a DEV Community write-up. The malicious build tried to plant a persistent SSH backdoor; Cursor pulled it, rotated keys and shut down the marketplace.
DEV Community · AIAI score 68
Other stories people are talking about
- Heat index 82Weijie AI Map Drawing Launches with Editable AI Drafts and MCP Support1 sources
- Heat index 53Developer outlines four ways to keep Claude Code running 24/7 and take over from a phone1 sources
- Heat index 61Review of Five Open-Source Claude Code Alternatives to Watch in 20261 sources
- Heat index 647RisingCat Wu, product lead for Claude Code, joins OpenAI9 sources
- Heat index 59Claude Code 2.1.316 Introduces Environment Variable for Subagent Reasoning Effort1 sources
How is heat calculated?About the methodHide
Heat counts how many independent sources covered a story in the last 48 hours: one source counts once no matter how many posts it published, decaying with a 24-hour half-life. What ranks first is what many people are talking about.
This page aggregates public feeds. Headlines and summaries are machine-organized and remain the property of the original authors; verify important facts at the source. If you believe a headline or summary infringes your rights, email the contact address in the footer with the page URL and basis of your claim, and we will remove or replace it after review.
- Surge
- Discussion rising fast
- New
- First report within 6 hours
- Rising
- Still gathering discussion