Socket: Malicious Claude Code 2.1.313 Extension Removed From Cursor Marketplace, Early Reports Overblown
zeeg · x · 2026-10-31
Socket published an analysis pushing back on misinformation around Claude Code 2.1.313, noting initial reports were later rewritten. After examining registry records and distribution, Socket confirms Cursor removed a flagged malicious Claude Code 2.1.313 extension from its marketplace, but the actual exposure appears far more limited than the supply-chain-attack framing suggested.
More from coding & agent
- Playwright MCP Server lets AI assistants drive remote browsers — modelcontextprotocol · 2026-10-31
- zero-core-tools: MCP connector bundling scraping, code review, sentiment — modelcontextprotocol · 2026-10-31
- Codex power user shows 71.5B lifetime tokens and a 262-day daily streak — TheMoonMidas · 2026-10-31
- ComfyUI-Dials: prompt pairs become 14KB sliders controlling video motion & mood, no LoRA training — MatlowAI · 2026-10-31
- Dev Asks GPT-6 Astra to Motorize an Office Chair, Then Builds It in Real Life — sdand · 2026-10-31
- Truo: read-only MCP server pipes live Australian bank data into AI assistants — truo_au · 2026-10-31