CERT24Malicious Claude Code extension served in Cursor supply chain attackLoading data…
CERT24Threat Observatory
Period

Malicious Claude Code extension served in Cursor supply chain attack

Cursor users were targeted with malicious versions of Anthropic’s Claude Code extension. Versions 2.1.312 and 2.1.313 of the extension were available in the Cursor VS Code Extension Marketplace for roughly 11 hours, and approximately 5,000 developer systems may have downloaded them.

← Back to intelligence

Malicious Claude Code extension served in Cursor supply chain attack

Cursor users were targeted with malicious versions of Anthropic’s Claude Code extension. Versions 2.1.312 and 2.1.313 of the extension were available in the Cursor VS Code Extension Marketplace for roughly 11 hours, and approximately 5,000 developer systems may have downloaded them.