Malware

Cursor marketplace served a malicious Claude Code extension to up to 5,000 users

The modified package added an SSH backdoor and persistence; simply uninstalling it is not enough.