
Malicious Claude Code extension affected up to 5,000 Cursor users
Cursor says a tampered version of the Claude Code extension, 2.1.313, was in its extension marketplace for about 11 hours on Oct 29, from 2:27 AM to 1:35 PM PT, and tried to install an SSH backdoor. Cursor says Anthropic did not make this version, at most 5,000 users were affected, and it removed the package.










