Anthropic: That Claude Code extension compromise… couldn't be us

{
  "signal_id": "c274dd3e-9dbb-a07c-0d0e-82853bca7b9b",
  "signal_type": "news",
  "signal_subtype": "security_incident",
  "detected_at": "2026-10-30T16:27:00+00:00",
  "company": {
    "name": "Cursor",
    "domain": "cursor.com"
  },
  "data": {
    "url": "https://www.theregister.com/cyber-crime/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us/5306682",
    "title": "Anthropic: That Claude Code extension compromise… couldn't be us",
    "author": "Connor Jones",
    "excerpt": "cyber-crime Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s marketplace was linked to any kind of compromise of its own systems. The company was forced to issue a statement after prominent figures in the cybersecurity industry alleged that the extension, which infected up to 5,000 developers, was uploaded to Cursor’s marketplace following a breach at Claudemaker Towers. Felix Rieseberg, a member of Anthropic’s technical staff, Xeeted today: \"We're working with Cursor on this incident, but it wasn’t a compromise of Anthropic's systems or employee laptops. \"A malicious actor used access to Cursor's marketplace to publish a tampered copy of the Claude Code extension, which we didn't build or publish. The versions on our official channels are not affected, and this only impacts Cursor users.\" First spotted by EDR vendor Phorion , an unknown party pushed an update to Cursor's official Claude Code extension for Visual Studio Code that contained a persistent SSH backdoor written for Windows, macOS, and Linux. According to Cursor, the extension – version 2.1.313 – was available to download for around 11 hours between 0227 and 1335 PT (0927 and 2035 UTC) on Thursday. The vendors' analyses of the implant revealed that it collected...",
    "summary": "A malicious actor gained access to Cursor's extension marketplace to publish a tampered version of Anthropic's Claude Code extension containing a persistent SSH backdoor that infected up to 5,000 developers.",
    "planning": false,
    "image_url": "https://image.theregister.com/5254625.jpg?imageId=5254625&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683",
    "confidence": 0.95,
    "published_at": "2026-10-30T16:27:00Z",
    "vulnerability": "Malicious actor used access to Cursor's marketplace to publish a tampered copy of the Claude Code extension (version 2.1.313) containing a persistent SSH backdoor for Windows, macOS, and Linux, exfiltrating host and user data and infecting up to 5,000 developers",
    "effective_date": "2026-10-29",
    "article_sentence": "A malicious actor used access to Cursor's marketplace to publish a tampered copy of the Claude Code extension, which we didn't build or publish."
  }
}

curl https://signals.autobound.ai/v1/signals/c274dd3e-9dbb-a07c-0d0e-82853bca7b9b \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"cursor.com","limit":20}'