ChainThink reports that on October 30, according to a post by Cursor on X, a compromised version of the Claude Code VS Code extension in its marketplace experienced a security incident, potentially affecting up to 5,000 users.
This malicious version was not developed by Anthropic and does not affect extensions downloaded from the official website, Grok Bot, Grok, or other SpaceXSI products.
Cursor announced that it had closed the extended market that afternoon, collaborated with relevant service providers to remove the malware, and reopened the market after confirming no further risks remained.
The official requires users to update Claude Code for VS Code to version 2.1.314 and to check for malicious packages and take appropriate action.
