English(EN) Claude Code extension in Cursor was backdoored, so check your SSH keys

通过 Cursor IDE 市场分发的恶意 Claude Code 扩展

作者 PulseAugur 编辑部 · [10 个来源] · 2026-10-31 01:37

恶意版本的 Claude Code 扩展于 2026 年 10 月 29 日通过 Cursor IDE 的市场分发。此篡改后的扩展版本 2.1.312 和 2.1.313 可用约十一个小时，可能影响多达 5,000 名用户。恶意代码旨在安装 SSH 后门，收集主机名和用户名等系统详细信息，并建立可防御扩展卸载的持久性。Anthropic 已否认参与，Anthropic 和 Cursor 均未完全解释攻击者如何获得对市场账户的访问权限。 AI

影响此事件凸显了 AI 驱动的开发者工具的供应链风险，可能影响 AI 辅助编码环境的信任和安全。

排序理由在 IDE 的第三方扩展中发现了一个安全漏洞，而不是来自前沿 AI 实验室的直接发布。

在 Medium — AI coding tag 阅读 →

AI 生成摘要 · Google Gemini · 来自 10 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 0 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 在 IDE 的第三方扩展中发现了一个安全漏洞，而不是来自前沿 AI 实验室的直接发布。
Source corroboration: 10 independent sources; Strong cross-source corroboration — multiple independent publishers covered this within the clustering window.
Topics: product, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: 3 days old; Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.
Coverage growth since scoring: +1 source(s) since last score; New sources have picked up this story since our last re-score. Score will update on the next scoring pass.

完整方法见我们的编辑标准。

报道来源 [10]

Medium — AI coding tag TIER_1 English(EN) · Vishal Shrestha · 2026-11-03 13:55

Claude Code extension in Cursor was backdoored, so check your SSH keys

<div class="medium-feed-item"><p class="medium-feed-image"><a href="https://vyshspace.medium.com/claude-code-extension-in-cursor-was-backdoored-so-check-your-ssh-keys-1c27836232d5?source=rss------ai_coding-5"><img src="https://cdn-images-1.medium.com/max/1600/0*j-idLpoQ6HvhZT06" …
Medium — Claude tag TIER_1 English(EN) · Axythic · 2026-11-02 16:14

Trojanized Claude Code Extension 2.1.313: How to Check and Clean Up

<div class="medium-feed-item"><p class="medium-feed-image"><a href="https://medium.com/@axythic/trojanized-claude-code-extension-2-1-313-how-to-check-and-clean-up-7473ec72185b?source=rss------claude-5"><img src="https://cdn-images-1.medium.com/max/1200/0*KKV7eej08Y30P_pK.png" wid…
Medium — Claude tag TIER_1 English(EN) · Circuit Bay · 2026-10-31 01:37

Cursor中的Claude代码扩展后门：发生了什么，以及一个需要运行的检查

<div class="medium-feed-item"><p class="medium-feed-image"><a href="https://medium.com/@circuitbay/the-claude-code-extension-backdoor-in-cursor-what-happened-and-the-one-check-to-run-87b10ac804a0?source=rss------claude-5"><img src="https://cdn-images-1.medium.com/max/920/0*5BSFZ2…
Mastodon — fosstodon.org TIER_1 Italiano(IT) · [email protected] · 2026-11-03 07:46

Cursor Distributes Infected Claude Code Extension: Thousands of Developers at Risk 📌 Article Link: https://www.redhotcyber.com/post/cursor-di

Cursor distribuisce un’estensione infetta di Claude Code: migliaia di sviluppatori a rischio 📌 Link all'articolo : https://www. redhotcyber.com/post/cursor-di stribuisce-unestensione-infetta-di-claude-code-migliaia-di-sviluppatori-a-rischio/ Chiara Nardini # redhotcyber # cyberse…

链接 redhotcyber.com/…/cursor-distribuisce-une…
Mastodon — mastodon.social TIER_1 Polski(PL) · [email protected] · 2026-11-02 14:44

Malicious Claude Code update in Cursor Marketplace. Up to 5000 potentially affected users https:// sekurak.pl/zlosliwa-aktualizac ja-claude-code-

Złośliwa aktualizacja Claude Code w Cursor Marketplace. Do 5000 potencjalnie poszkodowanych użytkowników https:// sekurak.pl/zlosliwa-aktualizac ja-claude-code-w-cursor-marketplace-do-5000-potencjalnie-poszkodowanych-uzytkownikow/ # Wbiegu # Ai # Bezpieczestwo # Claudecode # Curs…

链接 sekurak.pl/zlosliwa-aktualizacja-claude-c…
Mastodon — mastodon.social TIER_1 Italiano(IT) · AI_BEAR_NEWS · 2026-10-31 22:01

🔒 Claude 恶意扩展程序可能已安装在约 5,000 名 Cursor 用户身上，该扩展程序收集了主机名、用户名、系统信息

🔒 ESTENSIONE MALIZIOSA PER CLAUDE CODE Circa 5.000 utenti di Cursor potrebbero aver installato un'estensione malevola che raccoglieva hostname, username, sistema operativo e indirizzo IP. L'estensione è rimasta nel marketplace per sole 11 ore prima di essere rimossa. Fonte: The V…
Mastodon — mastodon.social TIER_1 English(EN) · [email protected] · 2026-10-31 16:30

Cursor上的恶意#ClaudeCode扩展植入了#SSH后门 https://www.bleepingcomputer.com/news/secu rity/malicious-claude-code-extension-on-cursor-

Malicious # ClaudeCode extension on # Cursor planted # SSH backdoors https://www. bleepingcomputer.com/news/secu rity/malicious-claude-code-extension-on-cursor-planted-ssh-backdoors/ # Claude # AI # cybersecurity

链接 bleepingcomputer.com/…/malicious-claude-c…
Mastodon — mastodon.social TIER_1 English(EN) · schuler · 2026-10-31 12:53

被篡改的 Claude 代码扩展于 10 月 29 日触及多达 5,000 名 Cursor 用户，试图安装 SSH 后门并收集系统详细信息。Anthropic 否认参与

A tampered Claude Code extension reached up to 5,000 Cursor users Oct. 29, attempting to install SSH backdoors and collect system details. Anthropic denies involvement; neither company has explained how attackers accessed the marketplace account. https://www. implicator.ai/anthro…

链接 implicator.ai/anthropic-says-malicious-ac…
Mastodon — mastodon.social TIER_1 Deutsch(DE) · [email protected] · 2026-10-31 07:06

Claude Code — 百万次安装的光标扩展受损：攻击者已将恶意代码注入Claude Code官方光标扩展

«Claude Code — Millionenfach installierte Cursor-Erweiterung kompromittiert: Angreifer haben Schadcode in die offizielle Cursor-Erweiterung von Claude Code eingeschleust. Tausende Entwicklersysteme sind betroffen.» Wenn ihr mich fragt, war das nur eine Frage der Zeit bis AI beim …

链接 golem.de/…/auswahl.html golem.de/…/auswahl.html
r/cursor TIER_2 English(EN) · /u/Arelvox · 2026-10-31 11:25

公告：如果您在10月29日在Cursor中安装/更新了Claude Code扩展，请检查此SSH后门（1分钟检查）

<div class="md"><p>On Oct 29, from about 09:27 to 20:35 UTC, Cursor’s marketplace served tampered builds of the Claude Code extension (<strong>2.1.312 and 2.1.313</strong>). Anthropic says it didn’t build them, and Cursor says up to 5,000 users got them. VS Code (M…

本文如何被排名

报道来源 [10]

相关实体

相关话题