A malicious actor compromised the Cursor VS Code Extension Marketplace to distribute a poisoned version of Anthropic's Claude Code extension. This tampered extension, versions 2.1.312 and 2.1.313, was signed with Anthropic's legitimate identity, leading to auto-updates for approximately 5,000 users. The malicious code exfiltrated sensitive user data, including environment variables and SSH keys, and attempted to establish a persistent reverse SSH tunnel to an attacker-controlled server. While errors in the malicious code prevented full compromise on most systems, the persistence scripts and data exfiltration were successful for some users. Cursor has since removed the malicious version, taken the marketplace offline for security, and released a clean version (2.1.314). AI
IMPACT Highlights the risks of supply chain attacks in AI tools and the need for robust verification beyond cryptographic signatures.
RANK_REASON A security incident involving a third-party distribution of an AI-related tool.
Read on dev.to — Claude Code tag →
- 134.209.82.225
- Anthropic
- Claude Code
- Cursor VS Code Extension Marketplace
- Ed25519
- Microsoft Threat Intelligence
- OpenSourceMalware
- Open VSX
- Visual Studio Marketplace
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
