Cursor Blog · 5 天前精选模型评分73
Cursor 市场出现恶意版 Anthropic.claude-code 扩展 2.1.312 和 2.1.313
Oct 29, 2026·companySecurity notice — malicious version of Anthropic.claude-code (2.1.312 and 2.1.313) identified in the Cursor VS Code Extension MarketplaceCursor Team5mCursor Team·5m
导读
Cursor 团队在 Cursor VS Code Extension Marketplace 中发现被恶意篡改的 Anthropic.claude-code 扩展 2.1.312 和 2.1.313（Windows 与 macOS 版），这些版本并非 Anthropic 开发。
推荐理由
官方披露恶意扩展的植入方式与自查命令，对使用该扩展的开发者有直接处置价值。
分类置信度
高
- 官方或准官方来源，且无冲突类别。
- 正文、可信日期、主分类和证据摘录完整。
来源级别：官方一手
事件类型：安全事件
证据摘录
- “Today we identified a security incident involving a specific extension in the Cursor VS Code Extension Marketplace: Anthropic.claude-code version 2.1.312 and 2.1.313 for Windows and MacOS .”
- “These malicious versions of the extension were not developed by Anthropic.”
- “This does not impact other extensions downloaded from the cursor.com/marketplace, Grok Bot, Grok or our other SpaceXSI products.”
- “Outside of highly unusual circumstances where Cursor was started with administrator privileges, due to errors in the malicious code, this step would fail.”
- “Uninstalling the extension may not be sufficient — the payload drops standalone persistence scripts that keep running.”
来源：Cursor Blog · cursor.com