CURSOR'S CLAUDE CODE LISTING HID A TRAP

The real news

The story, straight

An extension is a plugin that adds tools to your code editor, the app where you write software. A marketplace is the shop supplying those plugins.

Recognizing the name on the box doesn't guarantee what's inside.

Cursor says at most 5,000 users may have installed a maliciously modified Claude Code extension from its marketplace. The affected versions, 2.1.312 and 2.1.313, were available for Windows and macOS for about 11 hours on 29 October 2026.

Cursor says these malicious versions were not developed by Anthropic. This is a story about a tampered package in Cursor's shop, not an AI model turning evil.

Cursor has not explained how the modified builds reached the marketplace.

The code collected computer and user information and tried to establish lasting remote access: a way for someone elsewhere to connect to the machine. Cursor says missing administrator permissions, alongside errors in the code, prevented that connection step on most hosts.

That does not establish that thousands of computers were taken over.

It also doesn't mean nothing happened. Cursor says the extension added an unauthorized access key and installed background scripts.

Uninstalling the plugin may leave those behind.

Lil'meme's inspection method: polish the badge until the crowbar looks accredited.

Cursor removed the malicious builds and says the attacker's server was taken offline. The useful next step is its security notice: affected users should follow the checks and cleanup guidance, rather than assuming uninstall means clean.

The lesson isn't that developers were foolish. It's that a familiar product name cannot do the shop's security work.

Like or repost: badges have had enough unsupervised authority.

Thanks for supporting Lil'meme. Your support is appreciated.