Malicious Claude Code extension pulled from Cursor marketplace after SSH backdoor attempt
A malicious version of Anthropic's Claude Code extension, distributed via Cursor's VS Code marketplace, attempted to install a persistent SSH backdoor on developers' machines. It remained live for about 11 hours, affecting versions 2.1.312 and 2.1.313, before being removed.
Lead source: InfoWorld AI