Coding agentCursorConfirmed
Story 10 of 12 in the Friday 30 October editionCursor removes compromised Claude Code extension versions after marketplace incident
Cursor disclosed on 30 October 2026 that malicious macOS and Windows builds of the Anthropic.claude-code extension (versions 2.1.312 and 2.1.313) were served from the Cursor VS Code Extension Marketplace for roughly 11 hours on 29 October 2026, affecting at most 5k users.
Edited by Ashutosh Shrivastava
31 Oct 2026, 11:45 IST · 1 min read
Between 14:57 IST on 29 October 2026 and 02:05 IST on 30 October 2026, Cursor’s marketplace served tampered macOS and Windows builds of Anthropic.claude-code (versions 2.1.312 and 2.1.313) to at most 5k users, planting an svc-telemetry SSH key and a 60-second reverse tunnel task. Cursor shipped clean version 2.1.314, rotated marketplace keys, and published terminal remediation scripts after law enforcement took the command-and-control server offline.
Sources
- PrimarySecurity Incident Affecting Claude Code Extension in Cursor Marketplacecursor.com · Official incident disclosure and remediation scripts
- On XCursor (@cursor_ai) on Xx.com · Official security advisory post
The rest of the day
Read the whole day
01InfraGoogle
Google receives first Gemma 4 inference response from orbital TPU on Project Suncatcher
Google Research completed its orbital “Hello World” milestone on 30 October 2026, uplinking a prompt to an onboard Gemma 4 model running on a data-centre-class TPU aboard its Project Suncatcher prototype satellite and receiving a downlinked haiku over Svalbard, Norway.
02ProductOpenAI
OpenAI launches Private Intelligence security architecture for enterprise AI
OpenAI introduced Private Intelligence on 30 October 2026, unifying zero-retention API options, confidential-computing Private Inference in preview, and granular workspace action policies across ChatGPT, Codex, and the OpenAI API.
03ProductAnthropic
Anthropic renames Claude Max 20x to Ultra and removes five-hour session caps
Anthropic renamed its $100 monthly Claude Max 5x tier to Max and its $200 monthly Max 20x tier to Ultra on 30 October 2026, eliminating five-hour rolling session limits on verified Ultra accounts.
04CreativeThe Biological Computing Co.
The Biological Computing Co. ships neuron-derived TBC mischief 1 video model
San Francisco startup The Biological Computing Co.
Spotted an error? Email aiforsuccess.in+compass@gmail.com or tag @ai_for_success on X