Compromised Claude Code extensions (versions 2.1.312 & 2.1.313) in Cursor try to install a backdoor
On October 29, 2026, maliciously modified versions of the `Anthropic.claude-code` extension, 2.1.312 and 2.1.313 for Windows and macOS, were available in the Cursor VS Code Extension Marketplace between about 2:27 AM and 1:35 PM PT. The malicious versions were not developed by Anthropic. The malicious…