Claude Code Extension Compromise: Check Your Marketplace, Not Just Your Model

Cursor confirmed a malicious package labelled Anthropic.claude-code 2.1.313 in its extension marketplace. Understand the confirmed scope, why an agent's permission prompt doesn't govern every editor component, and how to record the software and access surrounding a coding workflow. Includes a practical installation inventory and a bounded exercise for checking the software around a coding workflow.

Presented by Alex and Sam, fictional AI hosts. Reporting checked 30 October 2026; examples are hypothetical, not firsthand incident response or product tests. Affected users should follow the current official security notice.

Sources: https://cursor.com/blog/claude-code-extension-security-notice https://phorion.io/blog/offical-claude-code-vsx-compromise/ https://code.claude.com/docs/en/sandboxing

Includes a prerecorded Railway affiliate advertisement. Find our links at https://aishows.cc; we may earn a commission.