Cursor has removed a tampered version of Anthropic’s Claude Code VS Code extension from its marketplace after discovering malicious code that attempted to install a persistent SSH backdoor and collect user information. The package may have reached up to 5,000 users during an 11-hour exposure window.
Cursor Reports Malicious Claude Code Extension Affecting up to 5,000 Users