Cursor商城被篡改Claude扩展试图植入SSH后门
Cursor表示，一个被篡改的Claude Code for VS Code扩展通过其插件商城影响最多5,000名用户，该恶意版本并非Anthropic开发。Phorion发现，2.1.313版本包含用于收集主机和用户信息、获取与密钥、令牌及机密相关环境变量名称、添加攻击者控制的SSH密钥，以及建立反向隧道和跨平台持久化的代码。报道指出，代码错误可能导致许多系统未能成功开启远程访问；另有报道将2.1.312也列为受影响版本。Cursor已下架恶意版本、临时关闭商城、配合服务商处置恶意软件，随后恢复商城，并要求用户升级至2.1.314。
这起事件表明，AI开发工具的分发渠道若遭篡改，恶意代码可能获取主机信息并识别设备上存在哪些云凭据，同时包含旨在维持远程访问的逻辑。不过，远程访问并未在所有受影响系统上成功建立。
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the http://cursor.com/marketplace, Grok Bot, Grok or our other SpaceXSI products. In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk. If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: https://cursor.com/blog/claude-code-extension-security-notice