#vs-code
-
Official Claude Code Extension on Cursor's Marketplace Swapped for a Version with an SSH Backdoor
A modified Claude Code extension spread through Cursor's extension marketplace. It added an attacker's key to authorized_keys and installed persistence. Cursor estimates that at most 5,000 users were affected.