Tampered Claude Code extension in Cursor marketplace exposed up to 5,000 users to SSH backdoor
Tampered versions 2.1.312 and 2.1.313 of the Claude Code extension were available in Cursor's marketplace for about 11 hours on October 29, 2026, and Cursor said at most 5,000 users received them.