Tampered Claude Code extension in Cursor hit up to 5,000 users

AI coding editor Cursor said a malicious version of the Claude Code extension, not developed by Anthropic, was available in its marketplace for about 11 hours on Wednesday. The code allegedly attempted to install a hidden SSH backdoor on users’ computers. Cursor removed the package and said it would contact up to 5,000 potentially affected users.