ainotis Join
My notis

Checked fact 328031 Oct 2026Safety and security

The notice says the attacker server no longer functions and the hosting provider took it offline.

The exact words it rests on

Note: The attacker server no longer functions. We worked with the cloud provider that was hosting it to take it offline

What the source said when we opened it, on 31 Oct 2026.

The source

Security notice: malicious Anthropic.claude-code versions in the Cursor VS Code Extension Marketplace
Cursor · 2026-10-29

Checked

Checked by the notis newsroom on , against the source above.

In the story

Cursor says Claude Code 2.1.312 and 2.1.313 on its marketplace were malicious and attempted to add an SSH key. 31 Oct 2026

Cite this fact

Anyone may quote this address. It does not change; if we correct the story, this page says so.