FreeLLMAnthropic Claude VS Code extension backdoored on Cursor marketplace for hours
A malicious version of Anthropic’s Claude‑code extension was distributed via Cursor, affecting up to 5,000 developers before removal.
Between 5:27 am ET and 4:35 pm ET on October 29, 2026, a compromised version (2.1.313) of Anthropic’s Claude‑code VS Code extension was published in Cursor’s marketplace.
Both Cursor and Anthropic have not publicly explained how the attackers gained access to the official distribution channel, and Anthropic has not issued a customer warning.
Users who installed or updated the extension during the window are advised to run the provided remediation scripts, check for the “svc‑telemetry” SSH key, and rotate any credentials.
Was das für dich bedeutet
Developers relying on AI‑assisted tooling must verify the integrity of extensions, as supply‑chain attacks can expose code and credentials. The incident underscores the need for vigilant security practices, especially for those using free or locally hosted models that may depend on third‑party plugins.
Quellen
- Anthropic VS code extension on Cursor backdoored for nearly 12 hours, Ars Technica, 30 Oct 2026
- Security notice — malicious version of Anthropic.claude-code (2.1.312 and 2.1.313) identified in the Cursor VS Code Extension Marketplace · Cursor, cursor.com (official), 29 Oct 2026
Automatisch aus den obigen Quellen geschrieben, dann von unserem Code geprüft: Jede Zahl und jeder Name muss darin vorkommen, und kein Satz darf eine Quelle kopieren. Einen Fehler entdeckt? Melde ihn.
Welche KI kannst du heute kostenlos nutzen?
Jedes kostenlose KI‑Modell, bewertet durch blinde menschliche Stimmen, mit dem Speicher und der Geschwindigkeit, die es auf deiner eigenen GPU benötigt.