{
  "id": 17251591,
  "title": "Anthropic: That Claude Code extension compromise… couldn't be us",
  "url": "https://urgent.news/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-30T16:27:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/cyber-crime/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us/5306682"
  },
  "original_language": "en",
  "account": null,
  "summary": "Anthropic has denied allegations that a compromised version of the official Claude Code extension was linked to any kind of compromise of its own systems. The company issued a statement after cybersecurity industry figures alleged that the extension, which infected up to 5,000 developers, was uploaded to Cursor’s marketplace following a breach at Claudemaker Towers. However, Anthropic clarified that a malicious actor used access to Cursor’s marketplace to publish a tampered copy of the extension, which did not originate from Anthropic. The compromised version, version 2.1.313, contained a persistent SSH backdoor that collected host machine and user information and attempted to open a reverse SSH tunnel. Cursor removed the malicious version from the marketplace immediately upon detection and worked to remediate the issue, but Anthropic has not provided further details on how the malicious package made its way to the official marketplace.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 7,
    "also_reported_by": [
      {
        "outlet": "XDA Developers",
        "title": "Claude Code is the best Linux tech support I've ever had",
        "url": "https://urgent.news/2026/10/29/claude-code-is-the-best-linux-tech-support-ive-ever-had",
        "published": "2026-10-29T18:00:20.000Z"
      },
      {
        "outlet": "Dev.to",
        "title": "Claude keeps saying \"load-bearing\", compaction keeps eating my \"stop saying that\", so I built a tool with Claude Code that makes the correction stick",
        "url": "https://urgent.news/2026/10/30/claude-keeps-saying-load-bearing-compaction-keeps-eating-my-stop",
        "published": "2026-10-30T07:33:09.000Z"
      },
      {
        "outlet": "Channel News Asia",
        "title": "Cursor says up to 5,000 users affected by tampered Claude Code extension",
        "url": "https://urgent.news/2026/10/30/cursor-says-up-to-5-000-users-affected-by-tampered-claude-code",
        "published": "2026-10-30T08:32:32.000Z"
      },
      {
        "outlet": "Lobsters",
        "title": "Backdoors in Claude Code for VS, Cursor official extensions",
        "url": "https://urgent.news/2026/10/30/backdoors-in-claude-code-for-vs-cursor-official-extensions",
        "published": "2026-10-30T11:04:55.000Z"
      },
      {
        "outlet": "Fast Company",
        "title": "Hackers hijacked a Claude Code extension, exposing yet another new AI security risk",
        "url": "https://urgent.news/2026/10/30/hackers-hijacked-a-claude-code-extension-exposing-yet-another-new-ai",
        "published": "2026-10-30T17:29:12.000Z"
      },
      {
        "outlet": "TechRadar",
        "title": "AI-generated code is still frequently failing security checks — with Claude and GPT-6 topping the leader board",
        "url": "https://urgent.news/2026/10/30/ai-generated-code-is-still-frequently-failing-security-checks-with",
        "published": "2026-10-30T18:10:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}