Cursor: Security incident discovered involving an extension, estimated to affect up to 5,000 users

Odaily reports: Cursor, the AI coding tool under SpaceX, posted on X: "We have discovered a security incident affecting a tampered Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, affecting up to 5,000 users. This malicious extension version was not developed by Anthropic, and it does not affect other extensions downloaded from the official website, Grok Bot, Grok, or our other SpaceXSI products.

In response, we shut down the extension marketplace this afternoon, worked with the relevant service providers to remove the malware, and reopened the marketplace after confirming there was no further risk. If you are affected, please refer to the instructions in the official blog post to learn how to identify the malicious package and take measures to mitigate any potential impact. We have asked all customers to update Claude Code for VS Code to version 2.1.314."