Cursor: A security incident related to extensions has been identified, potentially affecting up to 5,000 users

Cursor: A security incident related to extensions has been identified, potentially affecting up to 5,000 users

2026-10-30 16:21

ChainThink report, October 30: According to information released by Cursor on the X platform, a compromised version of the Claude Code VS Code extension in its extension marketplace triggered a security incident, potentially affecting up to 5,000 users.

The malicious version was not developed by Anthropic and does not impact extensions downloaded from the official website, Grok Bot, Grok, or other SpaceXSI products.

Cursor stated that it had shut down the extension marketplace in the afternoon of the same day and collaborated with relevant service providers to remove the malware; the marketplace was reopened after confirming no further risks remained.

The official advisory urges users to update Claude Code for VS Code to version 2.1.314 and to identify and mitigate any malicious software packages.

Disclaimer: Contains third-party opinions, does not constitute financial advice

Recommended Reading

The Senate rejected advancing the CLARITY Act by a vote of 49 to 50, with Emmer anticipating a future attempt after the midterm elections.

3 hours ago
The Senate rejected advancing the CLARITY Act by a vote of 49 to 50, with Emmer anticipating a future attempt after the midterm elections.

Scroll Emergency Upgrade Fixes Prover Vulnerability, States Vulnerability Was Not Exploited

6 hours ago
Scroll Emergency Upgrade Fixes Prover Vulnerability, States Vulnerability Was Not Exploited

Laser Digital, a subsidiary of Nomura, participates in launching an on-chain credit facility for SMEs in Saudi Arabia, targeting $100 million in fundraising

6 hours ago
Laser Digital, a subsidiary of Nomura, participates in launching an on-chain credit facility for SMEs in Saudi Arabia, targeting $100 million in fundraising

OKX and ICE's joint tokenized stock platform is scheduled to launch on November 23, initially targeting over 70 assets

7 hours ago
OKX and ICE's joint tokenized stock platform is scheduled to launch on November 23, initially targeting over 70 assets

Fed's Whisperer: December Rate Hike All but Certain, Focus Shifts to Magnitude and Pace

7 hours ago
Fed's Whisperer: December Rate Hike All but Certain, Focus Shifts to Magnitude and Pace

Hong Kong police dismantle cross-border money laundering syndicate using cryptocurrency OTC, suspected of laundering HK$150 million in three months

7 hours ago
Hong Kong police dismantle cross-border money laundering syndicate using cryptocurrency OTC, suspected of laundering HK$150 million in three months

Crypto ETF Assets Reach $111 Billion, Yet Active Funds Struggle to Scale: Why Aren't Institutions Buying Alpha?

7 hours ago
Crypto ETF Assets Reach $111 Billion, Yet Active Funds Struggle to Scale: Why Aren't Institutions Buying Alpha?