logoalt Hacker News

skinfaxi • yesterday at 3:03 PM • 2 replies • view on HN

Why was the npm version 2.1.313 yanked?

https://www.npmjs.com/package/@anthropic-ai/claude-code?acti...


Replies

ddworken • yesterday at 3:18 PM

Dworken from Anthropic here, 2.1.313 was never published on OpenVSX, the VS Code marketplace, or on any of our official hosts. The malicious actor here had published a fake version of this extension on Cursor's marketplace. In order to disambiguate, we made sure our next update was 2.1.314.

➕ show 1 reply