Cursor 扩展市场出现被篡改的 Claude Code 扩展，影响至多 5000 名用户
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,
Cursor 称其 IDE 扩展市场出现一个被篡改的 Claude Code VS Code 扩展，影响至多 5000 名用户，该恶意版本并非 Anthropic 开发。Cursor 当天下架扩展市场，与相关服务商合作清除恶意软件，确认无进一步风险后已恢复上线，并要求所有用户升级到 Claude Code for VS Code 2.1.314 版本。
推荐理由
精选AI 评分 60
Cursor 官方披露扩展市场出现被篡改的 Claude Code 扩展，并给出受影响范围与处置过程，可供关注 IDE 插件供应链风险的人参考。
主题
正文
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the https://t.co/sJRGX5jLXW, Grok Bot, Grok or our other SpaceXSI products.
In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk.
If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: https://t.co/ESqf7YEtHZ