
Tampered Claude Code Extension in Cursor's Marketplace Tried to Plant an SSH Backdoor
Malicious versions 2.1.312 and 2.1.313 were live for about 11 hours on October 29. Cursor and Microsoft say the attacker's server is offline, but files left on affected machines must be removed by hand.

















