Cursor 扩展市场出现恶意 Claude Code 插件，最多波及 5000 用户
Cursor 扩展市场被人塞了假 Claude Code 插件，最多 5000 人中招。用它装插件的记得检查一下，官方让升级到 2.1.314。
Cursor 发布声明称其 IDE 扩展市场中被发现一个被修改的 Claude Code VS Code 恶意扩展，受影响用户最多 5000 人。该恶意版本并非 Anthropic 官方开发。Cursor 已在当天下午下架扩展市场，与相关供应商协作清除恶意软件，确认无进一步风险后重新上线。官方要求受影响用户将 Claude Code for VS Code 更新至 2.1.314 版本，并发布了排查恶意包的处理指引。
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor.com/marketplace , Grok Bot, Grok or our other SpaceXSI products. In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk. If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: cursor.com/blog/claude-co… 💬 463 🔄 987 ❤️ 6367 👀 1039369 📊 1574 ⚡
