{
  "id": 17252415,
  "title": "Anthropic: That Claude Code extension compromise… couldn't be us",
  "url": "https://urgent.news/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us-17252415",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-30T16:27:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/cyber-crime/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us/5306682"
  },
  "original_language": "en",
  "account": "Anthropic has rejected claims that a malicious version of the official Claude Code extension published on Cursor’s marketplace was connected to any system compromise. The company released a statement after cybersecurity experts alleged the extension, which potentially infected 5,000 developers, was uploaded to Cursor’s marketplace as a result of a breach at Claudemaker Towers. Felix Rieseberg, an Anthropic technical staff member, stated today: \"We are collaborating with Cursor on this incident, but it was not a breach of Anthropic’s systems or employee laptops.\" A malicious actor leveraged access to Cursor’s marketplace to publish a modified copy of the Claude Code extension, which is not linked to Anthropic. The compromised versions on Anthropic's official channels remain unaffected and only impact Cursor users. The malicious version, version 2.1.313, was initially discovered by Phorion, an EDR vendor, and was available for download for approximately 11 hours between 0227 and 1335 PT (0927 and 2035 UTC) on Thursday. This malicious version contained a persistent SSH backdoor for Windows, macOS, and Linux. The backdoor collected host machine and user information, attempted to establish a reverse SSH tunnel, and required admin rights for successful execution. However, the extension still forwarded collected data to the attacker and installed the persistence mechanism, so developers must investigate their instances for potential successful tunnel creation. To remediate the issue, users must reinstall the latest version of the extension and follow Cursor's provided instructions for clearing the infection. Neither Anthropic nor Cursor commented on the method of the malicious package reaching the official marketplace.",
  "summary": "Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 7,
    "also_reported_by": [
      {
        "outlet": "XDA Developers",
        "title": "Claude Code is the best Linux tech support I've ever had",
        "url": "https://urgent.news/2026/10/29/claude-code-is-the-best-linux-tech-support-ive-ever-had",
        "published": "2026-10-29T18:00:20.000Z"
      },
      {
        "outlet": "Dev.to",
        "title": "Claude keeps saying \"load-bearing\", compaction keeps eating my \"stop saying that\", so I built a tool with Claude Code that makes the correction stick",
        "url": "https://urgent.news/2026/10/30/claude-keeps-saying-load-bearing-compaction-keeps-eating-my-stop",
        "published": "2026-10-30T07:33:09.000Z"
      },
      {
        "outlet": "Channel News Asia",
        "title": "Cursor says up to 5,000 users affected by tampered Claude Code extension",
        "url": "https://urgent.news/2026/10/30/cursor-says-up-to-5-000-users-affected-by-tampered-claude-code",
        "published": "2026-10-30T08:32:32.000Z"
      },
      {
        "outlet": "Lobsters",
        "title": "Backdoors in Claude Code for VS, Cursor official extensions",
        "url": "https://urgent.news/2026/10/30/backdoors-in-claude-code-for-vs-cursor-official-extensions",
        "published": "2026-10-30T11:04:55.000Z"
      },
      {
        "outlet": "Fast Company",
        "title": "Hackers hijacked a Claude Code extension, exposing yet another new AI security risk",
        "url": "https://urgent.news/2026/10/30/hackers-hijacked-a-claude-code-extension-exposing-yet-another-new-ai",
        "published": "2026-10-30T17:29:12.000Z"
      },
      {
        "outlet": "TechRadar",
        "title": "AI-generated code is still frequently failing security checks — with Claude and GPT-6 topping the leader board",
        "url": "https://urgent.news/2026/10/30/ai-generated-code-is-still-frequently-failing-security-checks-with",
        "published": "2026-10-30T18:10:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}