Cursor, the AI coding tool under SpaceX, said it identified a security incident involving a tampered Claude Code extension for Visual Studio Code that was distributed through access to the Cursor IDE extension marketplace. The company said the issue may have affected as many as 5,000 users.
According to Cursor’s post on X, the malicious version was not developed by Anthropic. Cursor also said the incident did not affect other extensions downloaded from its official website, Grok Bot, Grok, or its other SpaceXSI products. In response, the company said it shut down the extension marketplace that afternoon, worked with service providers to remove the malware, and reopened the marketplace after confirming there was no ongoing risk.
Cursor asked potentially affected users to review instructions in its official blog post to identify the malicious package and take steps to reduce any possible impact. It also said all customers should update Claude Code for VS Code to version 2.1.314.
Odaily reported that Cursor, the AI coding tool under SpaceX, said in a post on X that it had identified a security incident involving a tampered Claude Code extension for Visual Studio Code that was accessed through the Cursor IDE extension marketplace. The company said the incident may have affected up to 5,000 users.
Cursor said the malicious extension version was not developed by Anthropic. It added that the issue did not affect other extensions downloaded from its official website, Grok Bot, Grok, or its other SpaceXSI products.
The company said it shut down the extension marketplace that afternoon, worked with relevant service providers to remove the malware, and reopened the marketplace after confirming there was no continuing risk.
For users who may have been affected, Cursor said they should review the instructions in its official blog post to learn how to identify the malicious package and take steps to reduce any potential impact. The company also asked all customers to update Claude Code for VS Code to version 2.1.314.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
