FreeLLMAnthropic Claude VS Code extension backdoored on Cursor marketplace for hours
A malicious version of Anthropic’s Claude‑code extension was distributed via Cursor, affecting up to 5,000 developers before removal.
Between 5:27 am ET and 4:35 pm ET on October 29, 2026, a compromised version (2.1.313) of Anthropic’s Claude‑code VS Code extension was published in Cursor’s marketplace.
Both Cursor and Anthropic have not publicly explained how the attackers gained access to the official distribution channel, and Anthropic has not issued a customer warning.
Users who installed or updated the extension during the window are advised to run the provided remediation scripts, check for the “svc‑telemetry” SSH key, and rotate any credentials.
O que isso significa para você
Developers relying on AI‑assisted tooling must verify the integrity of extensions, as supply‑chain attacks can expose code and credentials. The incident underscores the need for vigilant security practices, especially for those using free or locally hosted models that may depend on third‑party plugins.
Fontes
- Anthropic VS code extension on Cursor backdoored for nearly 12 hours, Ars Technica, 30 Oct 2026
- Security notice — malicious version of Anthropic.claude-code (2.1.312 and 2.1.313) identified in the Cursor VS Code Extension Marketplace · Cursor, cursor.com (official), 29 Oct 2026
Escrito automaticamente a partir das fontes acima, depois verificado pelo nosso código: todo número e nome deve aparecer nelas, e nenhuma frase pode copiar uma fonte. Encontrou um erro? Reporte‑o.
Qual IA você pode usar grátis hoje?
Todo modelo de IA gratuito, classificado por votos humanos cegos, com a memória e velocidade que ele precisa na sua própria GPU.