Comment by tekawade
21 hours ago
Anthropic only has an official extension for VS Code. Cursor is vs code fork and gave its own marketplace.
IIUC Anthropic does not publish extensions for Cursor. It’s basically, official Claude code extension “clone” not by Anthropic.
Ai summary in better words: The Recent Malicious Build (v2.1.313): A tampered version of this extension (version 2.1.313) was uploaded to the Cursor extension marketplace. This specific, malicious build was not developed or authorized by Anthropic. Attackers effectively hijacked or spoofed the extension's legitimate identity within the Cursor/Open-VSX system to bundle an unauthorized SSH backdoor into the real Anthropic code.
> Anthropic only has an official extension for VS Code.
That likely seems incorrect as I see Claude Code listed on open-vsx with:
* An "Anthropic" "Verified publisher" badge
* igorkofman listed who seems to be an Anthropic employee
* 63M downloads
* Reviews going back >1 year
https://open-vsx.org/extension/Anthropic/claude-code
And it is linked to here: https://code.claude.com/docs/en/vs-code (or, well, the URI doesn't tell us if it's using a proxied version or not, so it's complicated)
The AI summary here is right and the human info is wrong -- Anthropic does publish the Cursor extension in general, but did not publish this version
I’d say it’s more correct that Anthropic publishes the Open VSX version, and Cursor mirrors it in their own repository, labeling it as being published in their mirror by Anthropic even though it is not.