A trojanized Claude Code extension sat on Cursor’s marketplace for 12 hours and left an SSH backdoor
A look-alike Claude Code extension (version 2.1.313) rode the Cursor marketplace for about 12 hours and planted an SSH key and persistence on up to 5,000 machines. Plus…