How will they communicate and fix that. The affected version has been yanked from the marketplace: https://marketplace.visualstudio.com/items?itemName=anthropi... but that doesn't clean up infected machines.
ale42
Is this affecting only people using Cursor or all VS Code users? The article specifically mentions the Cursor marketplace. But the affected version is indeed missing on the official VS Code marketplace, was it compromised too?
richrichardsson
How legit is this? Seems low on details. I don't use Cursor or the VSCode extension, but know plenty in our organisation who use the latter. How worried should we be?
mindracer
Some more details https://doublepulsar.com/anthropic-hacked-to-deliver-remote-...
1shooner
Cursor reporting this: https://cursor.com/blog/claude-code-extension-security-notic... What appears to be an official Binance account reporting it also: https://www.binance.com/en/square/post/10-30-2026-claude-cod...
airhangerf15
VS Code extensions have always been terrible from a security perspective. This seems like it's a supply chain attack? Makes me think of Solar Winds from a few years ago. It doesn't appear that the Claude Code harness itself was compromised, was it? or Cursor if you use Anthropic models via Cursor's API itself? Lately I've been using a script that mounts my current working directory in a container and I put all my build tools in a Dockerfile. I also map the harness config (~/.config/opencode or whatever) to a named volume to minimize the chance a harness could grab other things off my host. I can't use it if I ask the LLMs for docker work since they need the docker socket and then all bets are off (it could just mount your root volume somewhere). I sure I could use a full QEMU VM or some other type of isolation for such devops tasks, but I haven't really looked into it yet. Guess I should.
rolosa
He says to follow his social, and he provides his handle, but there's no link, and I have no idea how to read it.
henearkr
It wasn't Anthropic that was hacked but SpaceXAI (their Cursor Marketplace).
hem777
”I've confirmed Binance use Claude Code with this extension.”
xx_ns
I think it should be important to note that this affected the Claude Code extension on the Open VSX extension registry (and by extension, the Cursor marketplace). From what is currently known, the build on the official marketplace was/is clean. EDIT: I am now actually unsure if this is the case. From what I can see, all of the write-ups mention the Cursor marketplace and Open VSX specifically, but make no explicit mention of the official Microsoft registry. EDIT 2: The version that was compromised (2.1.313) seems to have never been published on the official Microsoft registry. As per the documentation [1], unpublished versions should still be discoverable: > When you unpublish an extension, the Marketplace preserves the extension statistics. The extension remains publicly discoverable and available via an existing API. [1]: https://code.visualstudio.com/api/working-with-extensions/pu...
nubinetwork
It looks like they push an update every office day. I'm guessing if I installed 6 months ago and didn't update, that I should be fine?
eviks
That's literally impossible, with all the access to the frontier software development tools at their disposal they can ship features securely at 100x
glimshe
Why didn't Claude detect the hack and prevent it from affecting customers using its superhuman AGI reasoning?
stopsayingsorry
Imagine backdooring 50+ million installs. Hats off to the hackers.
K0nserv
If the sole purpose of this hack was to steal cryptocurrency, a silver lining might be, as in many similar cases, that if you stay away from that particular dumpster fire you are probably okay. I mean there's still a reverse shell on your machine to fix, but at least nothing of value was lost.
misnome
Has anyone managed to confirm the time that the backdoored version was released? None of my machines updated to it, I am wondering if it was saved by a combination of luck and > This extension is not updated yet because new versions become eligible for automatic update 12 hours after they are published. It will become eligible in 2 hours.
helsinkiandrew
> Yesterday, Anthropic were compromised and Cursor extension used by tens of millions of developers for Claude access was delivering a remote access trojan via an SSH reverse backdoor That's a bit hyperbolic: someone released a version of the Claude Code VS Code extension with a backdoor on the Cursor marketplace: > a maliciously modified version of Anthropic’s Claude Code extension was made available in the Cursor VS Code extension Marketplace https://cursor.com/blog/claude-code-extension-security-notic...
anon-3988
I have this realization recently that everyone that uses Claude Code or Codex have basically been running RCE code on a daily basis (me included). So much for "be careful about running curl | bash!". That puts it into perspective what does security and privacy really mean? For all I know, these CLIs could have been secretly scraping my entire directory. Who's checking?
AdrianCX
https://www.reuters.com/business/media-telecom/cursor-says-u... > Cursor said the extension was not developed by Anthropic and the maliciously modified extension was live on the marketplace from about 2:27 a.m. PT to 1:35 p.m. PT on Thursday So is this or isn't this from Anthropic and how did this happen?
Related Discussions
Found 5 related stories in 134.9ms across 11,107 title embeddings via pgvector HNSW
Discussion Highlights (20 comments)
mindracer
The extension has over 27 million installs, ouch
mrweasel
How will they communicate and fix that. The affected version has been yanked from the marketplace: https://marketplace.visualstudio.com/items?itemName=anthropi... but that doesn't clean up infected machines.
ale42
Is this affecting only people using Cursor or all VS Code users? The article specifically mentions the Cursor marketplace. But the affected version is indeed missing on the official VS Code marketplace, was it compromised too?
richrichardsson
How legit is this? Seems low on details. I don't use Cursor or the VSCode extension, but know plenty in our organisation who use the latter. How worried should we be?
mindracer
Some more details https://doublepulsar.com/anthropic-hacked-to-deliver-remote-...
1shooner
Cursor reporting this: https://cursor.com/blog/claude-code-extension-security-notic... What appears to be an official Binance account reporting it also: https://www.binance.com/en/square/post/10-30-2026-claude-cod...
airhangerf15
VS Code extensions have always been terrible from a security perspective. This seems like it's a supply chain attack? Makes me think of Solar Winds from a few years ago. It doesn't appear that the Claude Code harness itself was compromised, was it? or Cursor if you use Anthropic models via Cursor's API itself? Lately I've been using a script that mounts my current working directory in a container and I put all my build tools in a Dockerfile. I also map the harness config (~/.config/opencode or whatever) to a named volume to minimize the chance a harness could grab other things off my host. I can't use it if I ask the LLMs for docker work since they need the docker socket and then all bets are off (it could just mount your root volume somewhere). I sure I could use a full QEMU VM or some other type of isolation for such devops tasks, but I haven't really looked into it yet. Guess I should.
rolosa
He says to follow his social, and he provides his handle, but there's no link, and I have no idea how to read it.
henearkr
It wasn't Anthropic that was hacked but SpaceXAI (their Cursor Marketplace).
hem777
”I've confirmed Binance use Claude Code with this extension.”
xx_ns
I think it should be important to note that this affected the Claude Code extension on the Open VSX extension registry (and by extension, the Cursor marketplace). From what is currently known, the build on the official marketplace was/is clean. EDIT: I am now actually unsure if this is the case. From what I can see, all of the write-ups mention the Cursor marketplace and Open VSX specifically, but make no explicit mention of the official Microsoft registry. EDIT 2: The version that was compromised (2.1.313) seems to have never been published on the official Microsoft registry. As per the documentation [1], unpublished versions should still be discoverable: > When you unpublish an extension, the Marketplace preserves the extension statistics. The extension remains publicly discoverable and available via an existing API. [1]: https://code.visualstudio.com/api/working-with-extensions/pu...
nubinetwork
It looks like they push an update every office day. I'm guessing if I installed 6 months ago and didn't update, that I should be fine?
eviks
That's literally impossible, with all the access to the frontier software development tools at their disposal they can ship features securely at 100x
glimshe
Why didn't Claude detect the hack and prevent it from affecting customers using its superhuman AGI reasoning?
stopsayingsorry
Imagine backdooring 50+ million installs. Hats off to the hackers.
K0nserv
If the sole purpose of this hack was to steal cryptocurrency, a silver lining might be, as in many similar cases, that if you stay away from that particular dumpster fire you are probably okay. I mean there's still a reverse shell on your machine to fix, but at least nothing of value was lost.
misnome
Has anyone managed to confirm the time that the backdoored version was released? None of my machines updated to it, I am wondering if it was saved by a combination of luck and > This extension is not updated yet because new versions become eligible for automatic update 12 hours after they are published. It will become eligible in 2 hours.
helsinkiandrew
> Yesterday, Anthropic were compromised and Cursor extension used by tens of millions of developers for Claude access was delivering a remote access trojan via an SSH reverse backdoor That's a bit hyperbolic: someone released a version of the Claude Code VS Code extension with a backdoor on the Cursor marketplace: > a maliciously modified version of Anthropic’s Claude Code extension was made available in the Cursor VS Code extension Marketplace https://cursor.com/blog/claude-code-extension-security-notic...
anon-3988
I have this realization recently that everyone that uses Claude Code or Codex have basically been running RCE code on a daily basis (me included). So much for "be careful about running curl | bash!". That puts it into perspective what does security and privacy really mean? For all I know, these CLIs could have been secretly scraping my entire directory. Who's checking?
AdrianCX
https://www.reuters.com/business/media-telecom/cursor-says-u... > Cursor said the extension was not developed by Anthropic and the maliciously modified extension was live on the marketplace from about 2:27 a.m. PT to 1:35 p.m. PT on Thursday So is this or isn't this from Anthropic and how did this happen?