{"event":{"id":"evt-20261102-cursor","dedupe_key":"rts_milestone:rts_finding_c8754897d83d4684aa2e130f76eae5f4","event_type":"publication_or_official_action","title":"Cursor discloses malicious Claude Code extension packages in marketplace on 29 October","summary":"Cursor's official October 29 security notice, updated October 30, identifies tampered Claude Code extension versions 2.1.312 and 2.1.313 distributed through Cursor marketplace for Windows/macOS during an approximately 11-hour period. Payloads sought SSH-key persistence and remote access; Cursor says it removed malicious packages, rebuilt marketplace and disabled attacker server. Source verifies supply-chain incident, not successful compromise of every install, Anthropic's official repository, or proven credential theft. Same underlying incident as existing RTS/Post-Cutoff research; do not count its corrected version list as a new second incident.","occurred_at":"2026-10-29T00:00:00.000Z","published_at":"2026-10-29T00:00:00.000Z","observed_at":"2026-11-02T11:36:55.965Z","reconstructed_at":null,"ingest_type":"live_evidence_only","locations":null,"status":"verified","confidence":0.94,"metadata":{"rts_finding_id":"rts_finding_c8754897d83d4684aa2e130f76eae5f4","epistemic_scope":"dated_official_milestone_or_publication","evidence_only":1,"source_bound":1,"no_civilization_snapshot":1,"no_relation_onset":1,"bounded_canonical_novelty_only":1},"created_at":"2026-11-02T11:42:54.755Z","updated_at":"2026-11-02T11:42:54.755Z"},"artifacts":[{"id":"art-20261102-cursor","dedupe_key":"9948ee8974539e332c0b91045c893d468fcb3e79e4a18ca76d34c6d19a3c1ea6","canonical_url":null,"evidence_locator":"","artifact_type":"publication","title":"Cursor discloses malicious Claude Code extension packages in marketplace on 29 October","summary":"Cursor's official October 29 security notice, updated October 30, identifies tampered Claude Code extension versions 2.1.312 and 2.1.313 distributed through Cursor marketplace for Windows/macOS during an approximately 11-hour period. Payloads sought SSH-key persistence and remote access; Cursor says it removed malicious packages, rebuilt marketplace and disabled attacker server. Source verifies supply-chain incident, not successful compromise of every install, Anthropic's official repository, or proven credential theft. Same underlying incident as existing RTS/Post-Cutoff research; do not count its corrected version list as a new second incident.","creator_entities":[],"released_at":"2026-10-29T00:00:00.000Z","content_hash":null,"metadata":{"rts_finding_id":"rts_finding_c8754897d83d4684aa2e130f76eae5f4","epistemic_scope":"dated_official_milestone_or_publication","evidence_only":1,"source_bound":1,"no_civilization_snapshot":1,"no_relation_onset":1,"bounded_canonical_novelty_only":1},"created_at":"2026-11-02T11:42:54.752Z","updated_at":"2026-11-02T11:42:54.752Z","relation":"documents"}],"signals":[]}