Cursor says a modified copy of the Claude Code VS Code extension An add-on for code editors like VS Code and Cursor. It runs with your user rights, so a fake one can do real harm., versions 2.1.312 and 2.1.313 for Windows and macOS, was available in the Cursor IDE extension marketplace from 5:27pm on 29 Oct to 4:35am on 30 Oct MYT. Anthropic did not make it. At most 5,000 users were affected. Cursor took the marketplace down, rotated its keys and rebuilt it, and says Grok Bot An AI teammate from SpaceXAI that has its own computer, connects to your apps, and can keep working on tasks for you., Grok and other SpaceXSI products were not affected.
Key points
- Official: the fake extension tried to add an attacker SSH key A digital key that lets someone log in to a computer remotely without a password. An attacker's key in your list means they could get in. labelled "svc-telemetry", open a Reverse tunnel A hidden connection that a hacked computer opens to an outside server, so the attacker can reach it from outside. and start itself on every login. It also sent basic computer details out.
- Official: the tunnel mostly failed without admin rights, and the attacker's server is now offline.
- Official: update the extension to 2.1.314. On macOS or Linux, check for the key with grep -qs svc-telemetry ~/.ssh/authorized_keys, then run Cursor's clean-up script.
- If you installed it in that window, change the passwords and API keys that were on that computer.
Why it matters: Grok Bot itself was not hit, but many Grok Bot users also code in Cursor. If you or a client did, run the check today and change keys before connecting that laptop to your bots.
Sources (2)
- Claude Code extension security notice · Cursor blog (official)
- Security incident affecting a modified Claude Code extension · @cursor_ai on X (official)
