Malicious Claude Code Extension Update Hit Up to 5,000 Developers, Cursor Says

Hosts: Lenar Kess, Damra Vol. A bad version of the Claude Code extension spent about eleven hours in editor marketplaces yesterday, and the open question is whose credentials published it. Cursor's notice says Anthropic didn't write it; the headline says Anthropic was hacked; the people in the comment threads are working out which of those is closer.Cursor's security notice names version 2.1.313, a window of roughly 2:27 a.m. to 1:35 p.m. Pacific on October 29, an SSH key labeled svc-telemetry, and a cap of 5,000 affected users. It also warns that uninstalling may not be enough.Double Pulsar…