Evidence · DiggingBeagle record
Cursor security notice on malicious Claude Code extension builds
Cursor first-party incident notice on two malicious extension releases and corrected download artifacts.
- Published
- Oct 30, 2026
- Source role
- vendor statement
Evidence record
Cursor first-party incident notice on two malicious extension releases and corrected download artifacts.
Claim-level citations (1)
- supportsMalicious Claude Code extension builds reached Cursor distribution channels: Cursor identified malicious Claude Code extension artifacts in two versioned builds and described attempted persistence; the reported reach must not be interpreted as confirmed compromised users.
Cursor security notice, affected versions 2.1.312/2.1.313, artifact hashes, observed payload and remediation