Cursor says a second tampered version of the Claude Code add-on was also in its store
Users who installed version 2.1.312 or 2.1.313 should check for a hidden key and change their passwords.
Cursor, the AI coding program, updated its security notice Oct. 30 to say two tampered versions of Anthropic's Claude Code add-on were offered in its extension store, not one. They are versions 2.1.312 and 2.1.313, for Windows and Mac computers.
The Daily News reported Oct. 30 that only version 2.1.313 was involved, as Cursor first said. The updated notice also no longer gives a count of affected users. The first notice said up to 5,000.
The bad versions were available Oct. 29 from about 2:27 a.m. to 1:35 p.m. Pacific time. They tried to install a backdoor, a hidden way for an attacker to log in later. Cursor says that step failed on most computers because it needs administrator rights. But the code still added the attacker's digital key and sent computer details to the attacker. That server is now offline, Cursor said.
Anyone who installed either version should look for a key labeled "svc-telemetry," run Cursor's cleanup script and change passwords and logins, Cursor said.