--- format: "aidr-story-markdown/v1" id: "1356e0e9431acc90d7aa40fece67fa68c4c1b8082dee8b19c0f649b0033084a8" canonical_url: "https://aidr.today/1356e0e9?lang=en" title: "Cursor Says Up to 5,000 Users Affected by Modified Claude Code Extension" lang: "en" requested_lang: "en" available_langs: ["en","vi"] translation_fallback: null fallback_fields: [] published_at: "2026-10-30T08:06:56.000Z" category: "Tools" topics: ["anthropic","safety","devtools"] source_urls: ["https://x.com/mattjay/status/2116023617364570171","https://x.com/mntruell/status/2116075234763866460","https://x.com/cursor_ai/status/2116074289053175808","https://x.com/_calumhall/status/2116052748190073069","https://x.com/ArtemR/status/2116061589715689788","https://news.ycombinator.com/item?id=50302334","https://cyberplace.social/@GossiTheDog/117528831681803563"] summary: "Cursor reported a security breach involving a malicious, modified version of the Claude Code VS Code extension distributed through its IDE marketplace, affecting up to 5,000 users. The company temporarily disabled the marketplace, clarified the corrupted software was not developed by Anthropic, and advised users to update to version 2.1.314 of the extension." --- # Cursor Says Up to 5,000 Users Affected by Modified Claude Code Extension > [Open the canonical story]() **Published:** 2026-10-30T08:06:56.000Z **Category:** Tools **Topics:** anthropic, safety, devtools ## Summary Cursor reported a security breach involving a malicious, modified version of the Claude Code VS Code extension distributed through its IDE marketplace, affecting up to 5,000 users\. The company temporarily disabled the marketplace, clarified the corrupted software was not developed by Anthropic, and advised users to update to version 2\.1\.314 of the extension\. ## Sources - [Story source]() - [Supporting source]() - [Story source]() - [Supporting source]() - [Supporting source]() - [Discussion]() - [Story source]()