Cursor warns of malicious Claude Code extension packages

Cursor’s October 29 security notice identifies malicious Anthropic.claude-code packages numbered 2.1.312 and 2.1.313 for Windows and macOS in its VS Code Extension Marketplace. Cursor says they were not developed by Anthropic and attempted to establish persistent SSH access.

The company says it removed the packages, rebuilt the marketplace and worked to take the attacker’s server offline. Affected users should follow the current notice’s verification and remediation guidance. Cursor warns that uninstalling the extension alone may leave persistence mechanisms behind. Its findings concern the identified packages rather than evidence that the official distribution was compromised.

JetherVerse perspective: a development workstation is part of the business’s delivery infrastructure. Its software choices deserve the same ownership and maintenance records that a team would expect for a shared production service.

Start with an inventory that includes the installation source as well as the product name. Two people may believe they installed the same tool while obtaining different packages through different channels. Recording that distinction makes later incident reviews more useful.

A practical team record should identify who maintains workstations, who can help investigate unusual behaviour and where relevant installation history can be found. Keep it accessible to the people who will need it during an interruption, rather than relying on one developer’s memory.

For example, imagine a small agency learning that a component it uses is under investigation. A clear inventory allows the team to establish which projects and machines need review before making broad statements to customers. The next step can then be assigned to someone with appropriate technical responsibility.

Keep verified facts separate from assumptions throughout the response. Record the source of each important conclusion and update it as the investigation develops. A reassuring statement should reflect checks that have actually been completed.

JetherVerse’s technical support service at https://jetherverse.com/services/technical-support is relevant to organising software inventories and maintenance responsibilities. For this incident, the linked Cursor notice remains the authoritative source for the affected package details and response instructions.