Cursor

Malicious Claude Code extension in Cursor exposed up to 5,000 users

A tampered marketplace package attempted to install a persistent SSH backdoor; Cursor says Anthropic did not create it.