Post
Socket
socket.dev
did:plc:n6f3j47vjucu5ijwdmow7n2w
Cursor has removed a malicious Claude Code 2.1.313 extension from its marketplace. Despite early reports naming Open VSX and npm, we found no record of that version being published on either registry.
https://socket.dev/blog/claude-code-extension-compromise
2026-10-30T10:09:13.478Z