Cursor Flags Two Malicious Claude Code Extension Versions
Cursor’s October 29 notice, updated October 30, identifies malicious Anthropic.claude-code versions 2.1.312 and 2.1.313 distributed for macOS and Windows.
Cursor’s October 29 notice, updated October 30, identifies malicious Anthropic.claude-code versions 2.1.312 and 2.1.313 distributed for macOS and Windows.
Confirmed details
Cursor says the altered packages were available in its marketplace on October 29, roughly 2:27 a.m.–1:35 p.m. PT, and were not developed by Anthropic. They reported host data and environment-variable names, and attempted persistent SSH access. The server was taken offline, but uninstalling alone may leave persistence. Cursor advises isolating affected hosts, removing persistence and rotating accessible credentials from a trusted system.
OrangeX.com Analysis
OrangeX.com highlights developer endpoint exposure for teams handling digital assets. Variable names are not secret values, yet possible later access must be investigated. This notice does not establish cryptocurrency theft; remediation should follow evidence on the affected host.
Related Reports
BTCPay Urges Fresh Servers for Affected Old Instances, Beyond a Version Update
BTCPay’s November 2 advisory links attacks to 2.4.1 and earlier. It recommends a fresh server and new wallet for affected old instances, even if subsequently updated.
HKMA and HKUST Launch Post-Quantum Planning Toolkit for Banks
The HKMA and HKUST launched a PQC Toolkit on November 2. It supports bank transition planning after an initial readiness score of 2.3/10; full readiness by 2030 is a target.
Chainalysis Discloses Customer Data Access as Security Investigation Continues
Chainalysis says customer identity records were accessed, with no evidence to date of access to investigation content, clear-text passwords or session tokens.
