Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace

A malicious version of the Claude Code extension, 2.1.313, was distributed through Cursor's marketplace, potentially affecting up to 5,000 users. The compromised extension included code that added an SSH authorized key, attempted to establish a reverse SSH tunnel, and installed persistence mechanisms. While initial reports suggested distribution via Open VSX or npm, investigation found no evidence of the malicious version being published to those registries. Cursor confirmed the compromise, removed the extension, rebuilt its marketplace with rotated keys, and worked to take down the attacker's infrastructure.

AI-extracted · verify before operational use