FreeLLMAnthropic Claude VS Code extension backdoored on Cursor marketplace for hours
A malicious version of Anthropic’s Claude‑code extension was distributed via Cursor, affecting up to 5,000 developers before removal.
Between 5:27 am ET and 4:35 pm ET on October 29, 2026, a compromised version (2.1.313) of Anthropic’s Claude‑code VS Code extension was published in Cursor’s marketplace.
Both Cursor and Anthropic have not publicly explained how the attackers gained access to the official distribution channel, and Anthropic has not issued a customer warning.
Users who installed or updated the extension during the window are advised to run the provided remediation scripts, check for the “svc‑telemetry” SSH key, and rotate any credentials.
Cosa significa per te
Developers relying on AI‑assisted tooling must verify the integrity of extensions, as supply‑chain attacks can expose code and credentials. The incident underscores the need for vigilant security practices, especially for those using free or locally hosted models that may depend on third‑party plugins.
Fonti
- Anthropic VS code extension on Cursor backdoored for nearly 12 hours, Ars Technica, 30 Oct 2026
- Security notice — malicious version of Anthropic.claude-code (2.1.312 and 2.1.313) identified in the Cursor VS Code Extension Marketplace · Cursor, cursor.com (official), 29 Oct 2026
Scritto automaticamente dalle fonti sopra, poi controllato dal nostro codice: ogni numero e nome deve comparire, e nessuna frase può copiare una fonte. Hai trovato un errore? Segnalalo.
Quale AI puoi usare gratis oggi?
Tutti i modelli AI gratuiti, classificati da voti umani anonimi, con la memoria e la velocità necessarie sulla tua GPU.