Published at 10/30/2026, 8:05:20 AM · 27 views
📰 Cursor marketplace served a tampered Claude Code 2.1.313 extension with an SSH backdoor, affecting at most 5,000 users
Cursor posted a security notice on X at 07:46 UTC on Oct 30: version 2.1.313 of Anthropic.claude-code in its VS Code extension marketplace was a maliciously modified build, not developed by Anthropic, available from about 2:27am to 1:35pm PT on Oct 29 and affecting at most 5,000 users.
💬 What's your take? Join the discussion in the comments.
Read the original Chinese version
📰 Cursor 扩展市场出现被篡改的 Claude Code 2.1.313 扩展：植入 SSH 后门，最多 5,000 名用户受影响
Cursor 10 月 30 日 07:46（UTC）在 X 发布安全通告：其 VS Code 扩展市场中的 Anthropic.claude-code 2.1.313 版本被恶意篡改（并非 Anthropic 开发），10 月 29 日太平洋时间约 2:27 至 13:35 之间可被下载，最多影响 5,000…
💬 你怎么看？欢迎在评论区讨论。
#security #supply-chain #vscode-extension
0 Comments