Malicious Anthropic.claude-code 2.1.313 Found in Cursor Extension Marketplace

9 hours ago#security#cursor#claude-code#malware

Cursor Blog issued a security notice on October 30, 2026, identifying a malicious version of Anthropic.claude-code (2.1.313) in its Extension Marketplace. Users are advised to avoid installing or updating to this version and to check their current installations for potential compromise.

Coverage timeline

Cursor Blog9 hours ago
Security notice — malicious version of Anthropic.claude-code (2.1.313) identified in the Cursor Extension Marketplace

Anthropic: Claude flags 493 security issues across 25 open-source projects
Anthropic reported that Claude identified 493 security issues across 25 open-source projects, covering over 5 million lines of C, C++, Java, PHP, and Python code, including one vulnerability that went unnoticed for 21 years. The lab also announced a partnership with Theorem to use Claude for formally proving security properties at the assembly level across more than 100 real-world open-source libraries, extending formal verification to larger codebases.
4 reports · 3 sources460 points · 310 commentslast week
Anthropic updates usage policy to ban abusive behavior toward Claude
Anthropic revised its usage policy for the first time in over a year, adding explicit bans on sustained and needless abusive or cruel behavior toward Claude, alongside new rules on election interference, weapons development, surveillance, and deceptive campaigns. The update retains conversation termination as the primary enforcement mechanism for violations. Ordinary frustration and criticism remain permitted.
3 reports · 3 sources91 points · 225 comments3 weeks ago
Meta, Microsoft reportedly cut employee use of Anthropic's Claude
According to The Information, Meta and Microsoft are working to reduce their employees' reliance on Anthropic's Claude, with Meta's Claude Code active users dropping to about 30,000 from 60,000 earlier this yearcars. Microsoft has cut internal Claude spending by over 33%, reducing per-employee monthly token budgets from $100,000 to $10,000 and routing requests to cheaper models via Copilot. Meta is shifting developers to its own tools like Muse Code and MetaCode.
3 reports · 3 sources375 points · 383 comments4 weeks ago
SemiAnalysis: Anthropic A/B tests Claude subscription quotas, some users get 20% higher limits but lower value
Research firm SemiAnalysis reported that Anthropic is A/B testing Claude subscription quotas, giving some accounts on the same plan a 20% higher five-hour usage limit. However, when converted to API prices, these accounts' monthly resource value is about 20% lower. The report follows widespread user complaints about shrinking Claude quotas, and SemiAnalysis suggests quota settings can vary even for identical plans.
1 reports · 1 sourceslast week