Anthropic Claude Code Extension Malicious Version Exposure
Detects CrowdStrike Falcon telemetry referencing specific version and folder patterns of the Anthropic Claude Code extension, identifying potentially malicious builds (such as version 2.1.313 or 2.1.312 under Cursor) versus verified clean versions.
CQL

