Odaily Planet Daily reports that SpaceX’s AI programming tool, Cursor, posted on X: “We identified a security incident involving a tampered version of the Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, potentially affecting up to 5,000 users. This malicious extension version was not developed by Anthropic and does not impact any other extensions downloaded from the official website, Grok Bot, Grok, or our other SpaceXSI products.”
In response, we closed the extended market this afternoon, collaborated with relevant service providers to remove the malware, and reopened the market after confirming there were no further risks. If you were affected, please refer to the instructions in our official blog post for guidance on identifying the malicious package and taking steps to mitigate any potential impact. We have requested all customers to update Claude Code for VS Code to version 2.1.314.