Skip to content
Sign in
Artwork for Claude Code Cast
Claude Code Cast · October 30 · 6 min

Claude Code Extension Compromise: Check Your Marketplace, Not Just Your Model

Cursor confirmed a malicious package labelled Anthropic.claude-code 2.1.313 in its extension marketplace. Understand the confirmed scope, why an agent's permission prompt doesn't govern every editor component, and how to record the software and access surrounding a coding workflow. Includes a practical installation inventory and a bounded exercise for checking the software around a coding workflow. Presented by Alex and Sam, fictional AI hosts. Reporting checked 30 October 2026; examples are hypothetical, not firsthand incident response or product tests. Affected users should follow the current official security notice. Sources: https://cursor.com/blog/claude-code-extension-security-notice https://phorion.io/blog/offical-claude-code-vsx-compromise/ https://code.claude.com/docs/en/sandboxing Includes a prerecorded Railway affiliate advertisement. Find our links at https://aishows.cc; we may earn a commission.

0:00-6:16
Play in

transcript

No transcript — this publisher did not publish one.

show notes

Cursor confirmed a malicious package labelled Anthropic.claude-code 2.1.313 in its extension marketplace. Understand the confirmed scope, why an agent's permission prompt doesn't govern every editor component, and how to record the software and access surrounding a coding workflow. Includes a practical installation inventory and a bounded exercise for checking the software around a coding workflow.

Presented by Alex and Sam, fictional AI hosts. Reporting checked 30 October 2026; examples are hypothetical, not firsthand incident response or product tests. Affected users should follow the current official security notice.

Sources: https://cursor.com/blog/claude-code-extension-security-notice https://phorion.io/blog/offical-claude-code-vsx-compromise/ https://code.claude.com/docs/en/sandboxing

Includes a prerecorded Railway affiliate advertisement. Find our links at https://aishows.cc; we may earn a commission.

more episodes

All episodes