Claude Code Extension Compromise: Check Your Marketplace, Not Just Your Model

Cursor confirmed a malicious package labelled Anthropic.claude-code 2.1.313 in its extension marketplace. Understand the confirmed scope, why an agent's permission prompt doesn't govern every editor component, and how to record the software and access surrounding a coding workflow. Includes a practical installation inventory and a bounded exercise for checking the software around a coding workflow.
Presented by Alex and Sam, fictional AI hosts. Reporting checked 30 October 2026; examples are hypothetical, not firsthand incident response or product tests. Affected users should follow the current official security notice.
Sources: cursor.com/blog/claude-code-extension-security… phorion.io/blog/offical-claude-code-vsx-compro… code.claude.com/docs/en/sandboxing
Includes a prerecorded Railway affiliate advertisement. Find our links at aishows.cc; we may earn a commission.