What the public record establishes
Cursor dated the distribution window to approximately 02:27 to 13:35 Pacific on October 29. Its notice identifies modified Anthropic.claude-code versions 2.1.312 and 2.1.313 for macOS and Windows, and says Anthropic did not develop them. This records distribution and removal that day, rather than a later report. [1]
Cursor says the packages sent host details, including environment-variable names, and installed persistence. Enabling SSH generally failed without administrator privileges. Cursor removed the builds, rebuilt its marketplace and worked with the hosting provider to disable the attacker server; it reported no evidence that the official distribution or other versions were affected. [1]