Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of the Claude Code extension was distributed for eleven hours through the Cursor code editor marketplace. Approximately 5,000 developers were exposed to malware designed to establish persistent SSH backdoors on their systems, highlighting the severe supply-chain risks targeting developer environments.