Re:Official Claude Code extension compromise
by ddworken on Friday October 30, 2026 @11:18AM
(#50305148)
Dworken from Anthropic here, 2.1.313 was never published on OpenVSX, the VS Code marketplace, or on any of our official hosts. The malicious actor here had published a fake version of this extension on Cursor's marketplace. In order to disambiguate, we made sure our next update was 2.1.314.
https://www.npmjs.com/package/@anthropic-ai/claude-code?acti...