Cursor catches fake Claude AI opening secret door for hackers

Cursor identified a malicious version of Anthropic's Claude Code extension on its Extension Marketplace, affecting 5,000 users. The fake extension attempted to give hackers backdoor access to users' computers through Secure Shell and sent system data, including usernames, hostnames and IP addresses, to attackers. Cursor removed the extension and temporarily shut down its marketplace for an audit.