{ "type": "bundle", "id": "bundle--1ed2bbb3-3ae2-5d49-8d17-f823417de3a2", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55b961a1-4c9d-5a2c-830b-b876d3e8c896", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "org:81b8f1e1-3726-4727-bfa3-45984ad865b2", "name": "Cursor", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--3586136c-ac3f-5a73-8517-22a5a68ebf18", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "brh:e130bfc4-e42b-4dc9-8c0e-e226b73da655", "name": "Cursor Claude Code extension compromise" }, { "type": "incident", "spec_version": "2.1", "id": "incident--d4f160b6-70c7-5a8e-8b40-4da19656daf9", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "inc:a04f7753-1249-49ba-9b18-1ba729869b68", "name": "Cursor Claude Code extension compromise" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ddfd469-6517-5fa6-836f-f4b855e8a01a", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:410cfb5b-0322-43f2-b1de-97473a1f8d1e", "relationship_type": "affected-organization", "source_ref": "incident--d4f160b6-70c7-5a8e-8b40-4da19656daf9", "target_ref": "identity--55b961a1-4c9d-5a2c-830b-b876d3e8c896", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:764db870-85d6-4546-974e-53eb3fcd5d9c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ffebb8e8-ef39-5a05-8bc5-0977a99f7d8d", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:418cf151-29a0-40d0-aea9-78e6d339cd48", "relationship_type": "resulted-in", "source_ref": "incident--d4f160b6-70c7-5a8e-8b40-4da19656daf9", "target_ref": "x-ally-event--64d15456-bffa-5423-8013-b528a4c3a7ea", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:25f3af23-0f88-4c4d-98ba-3f61e8a492c8", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--05806792-ecb4-5230-8c38-52577deb7737", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:b4c459a5-a344-4b8b-b3be-615822b3ebc6", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:1e6c33e1-8391-49f2-9463-ea266dfa317d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Cursor said a maliciously modified Anthropic.claude-code extension version 2.1.313 was distributed through its VS Code extension marketplace on October 29, about 02:27–13:35 PT, potentially affecting at most 5,000 users. The malicious package was not developed by Anthropic." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--25fdff83-56e1-5d40-8a82-04396c87ceea", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:ddfae80f-cb7d-4303-b2f5-4d44e5686129", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:4c63c950-ace3-4423-a581-941d9f0ce5a9", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The modified extension collected host and user metadata, including public IP, configured Git email, working directories and environment-variable names. The notice does not say that it collected all environment-variable values." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--378e9a50-c5e0-5d7e-88a4-bbea7f6e4061", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:8dcc22b1-8c31-4830-85c1-6c3201778df8", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:f7b59a59-9094-4143-9856-59e7f0f42e73", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Cursor said implementation errors and required administrator privileges prevented some SSH-service and backdoor-login actions on ordinary hosts, but key insertion, persistence and metadata transmission could still occur." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--4f3c5bd6-2ebb-55b1-8f6d-41358698f83b", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:32e45343-5335-4bd7-8623-ed7db0b18a43", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:50cc2bdf-88a9-468c-9bb1-0d2ccca736e1", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The extension attempted to install an attacker-controlled SSH key, enable a local SSH service, create a reverse tunnel, and establish persistence through a macOS LaunchAgent or Windows scheduled task and Startup entry." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--5919f736-9c3c-5ddf-8b62-e7579cee2fa8", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:eeb257fc-e66d-4354-baab-eb07dfa9c743", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:0df5d637-ea61-4bd0-8419-6d258505f4f8", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Cursor advised treating affected machines as potentially compromised, removing persistence and keys, considering rebuilding, and rotating accessible credentials from a trusted device. Uninstalling the extension alone is insufficient." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--910325ae-26fe-5b99-8c14-3154b3bc67b2", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:f7a22ec6-e762-41f8-90a6-464cb4ebaa13", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:7e39cf9f-e548-40aa-aa87-f0bd6622cd4b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Cursor removed the package, temporarily closed its marketplace, rotated keys and rebuilt the service. Its audit found no other modified extensions. The attacker hosting server was taken offline with the hosting provider." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--94d06627-a58b-5062-81d4-4b158507ae45", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:b44d1834-2743-44ac-ad78-d8e596b9c598", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:c863e1d3-7eb7-42a4-a5d5-3dc55a8bbf1f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-29" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--b83d8b2f-1dc7-5e47-8ba4-84b638e83d61", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:39c49a4d-4211-4805-8a7a-41853e618ee4", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:c4818b9c-b9d3-4851-8819-bb2f4c0b6f6b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-29" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--d468c549-2e4f-5690-8132-c4eee6bb4edb", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:577390c2-743a-44d8-aeee-d5e51721bd96", "confidence": 100, "external_references": [], "x_ally_claim_object": { "kind": "iri", "value": "https://attack.mitre.org/techniques/T1098/004/" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f4657798-5196-5f17-8812-56cf21baa1b8", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "clm:c3806740-027f-460f-9927-d81de24bd41e", "confidence": 100, "external_references": [ { "source_name": "Cursor", "url": "https://cursor.com/blog/claude-code-extension-security-notice", "external_id": "cit:71e4f6eb-5d53-474a-b6ce-e326a6a4ac09", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:2cf5829f0827f48a2b4f4ffc967e701daaf9a4d47d321aec66c9d338c41e5138" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-10-29" } }, { "type": "x-ally-event", "spec_version": "2.1", "id": "x-ally-event--64d15456-bffa-5423-8013-b528a4c3a7ea", "created": "2026-10-30T14:19:15.350445+00:00", "modified": "2026-10-30T14:19:15.350445+00:00", "x_ally_original_id": "evt:ba1a3cc0-b0df-4474-87db-4f252e624d95", "name": "Malicious extension distributed and removed" } ] }