Cursor Expands Claude Code Malware Warning to Two Versions

Cursor expanded its warning to two malicious Claude Code extension releases for macOS and Windows, urging users who installed or updated them to clean affected machines and rotate credentials and sessions from a trusted system. The releases were available for about 5:27 a.m. to 4:35 p.m. ET (9:27 a.m. to 8:35 p.m. UTC) on Oct. 29. Anthropic did not develop either release. The revised notice adds version 2.1.312 to the warning about version 2.1.313 . Code in the extensions could run as soon as they loaded, before normal activation and without a Claude Code session being open.

Source: TokenPost