FreeLLMAnthropic Claude VS Code extension backdoored on Cursor marketplace for hours
A malicious version of Anthropic’s Claude‑code extension was distributed via Cursor, affecting up to 5,000 developers before removal.
Between 5:27 am ET and 4:35 pm ET on October 29, 2026, a compromised version (2.1.313) of Anthropic’s Claude‑code VS Code extension was published in Cursor’s marketplace.
Both Cursor and Anthropic have not publicly explained how the attackers gained access to the official distribution channel, and Anthropic has not issued a customer warning.
Users who installed or updated the extension during the window are advised to run the provided remediation scripts, check for the “svc‑telemetry” SSH key, and rotate any credentials.
Ce que cela signifie pour vous
Developers relying on AI‑assisted tooling must verify the integrity of extensions, as supply‑chain attacks can expose code and credentials. The incident underscores the need for vigilant security practices, especially for those using free or locally hosted models that may depend on third‑party plugins.
Sources
- Anthropic VS code extension on Cursor backdoored for nearly 12 hours, Ars Technica, 30 Oct 2026
- Security notice — malicious version of Anthropic.claude-code (2.1.312 and 2.1.313) identified in the Cursor VS Code Extension Marketplace · Cursor, cursor.com (official), 29 Oct 2026
Rédigé automatiquement à partir des sources ci‑dessus, puis vérifié par notre code : chaque nombre et chaque nom doivent y figurer, et aucune phrase ne doit copier une source. Une erreur ? Signalez‑la.
Quelle IA pouvez‑vous utiliser gratuitement aujourd’hui ?
Tous les modèles IA gratuits, classés par votes humains anonymes, avec la mémoire et la vitesse dont ils ont besoin sur votre propre GPU.