一个恶意的 Claude 代码扩展版本曾短暂提供给 Cursor 用户，在 11 小时内影响了约 5,000 人。Cursor 已确认版本 2.1.312 和 2.1.313 被篡改，并澄清这些版本并非由 Anthropic 开发。该公司已发布安全公告，详细说明了此次事件及其影响。 AI
影响 凸显了与 AI 工具集成和第三方扩展相关的安全风险。
排序理由 涉及 AI 驱动工具的第三方扩展的安全事件。
AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →
恶意 Claude 代码扩展曾短暂提供给 Cursor 用户
本文如何被排名
- Signal score
- 4 / 100
- Composite score across the factors below. Higher = stronger signal that this story matters right now.
- Newsworthiness bucket
- Tool
- 涉及 AI 驱动工具的第三方扩展的安全事件。
- Source corroboration
- Single-source cluster
- Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
- Topics
- product, safety
- Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
- AI-industry relevance
- High
- Clearly on-topic for AI-industry coverage.
- Story freshness
- Breaking (< 6h)
- Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.
完整方法见我们的编辑标准。
报道来源 [1]
-
回顾：Cursor 用户在约 11 小时内被提供的虚假 Claude 代码扩展
<!-- SC_OFF --><div class="md"><p>In case you missed Cursor's notice from Oct 29, here's the short version. - A tampered Claude Code extension was offered to Cursor users for about 11 hours. - Cursor says versions 2.1.312 and 2.1.313 were malicious, and that Anthropic did not bui…