Cursor and Microsoft detail a fake Claude Code extension that planted an SSH backdoor on developer machines
Versions 2.1.312 and 2.1.313 were served through Cursor's marketplace and were not published by Anthropic; affected users should rotate credentials.