Threat IntelligenceFake Claude Code Extension Planted SSH Backdoors on Developer Machines via Cursor Marketplace
A tampered copy of Anthropic's coding assistant sat in the Cursor extension store for roughly eleven hours on October 29, silently trying to unlock remote access to every machine that loaded it.
