Malicious Claude Code Extension Hit Up to 5,000 Cursor Users. A tampered version of the extension, not made by Anthropic, sat in Cursor's marketplace for about 11 hours Thursday and tried to install an SSH backdoor. Cursor says it pulled it, rebuilt the marketplace and helped