{"data":{"id":"e9741aba-274a-4835-ba61-da8e29a5bc01","title":"Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace","summary":"Cursor confirmed that a malicious Claude Code extension labeled version 2.1.313 was available through its extension marketplace on October 29, potentially affecting up to 5,000 users. Socket's investigation found no corresponding publication or removal records on Open VSX, the channel originally attributed in a malware report from OpenSourceMalware, which has since been substantially revised.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://socket.dev/blog/claude-code-extension-compromise?utm_medium=feed","publishedAt":"2026-10-30T09:26:06.050Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"low","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Claude Code","Cursor","Open VSX","VS Code Marketplace"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-30T09:26:06.050Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}