Fake Claude Code extensions planted SSH backdoors on Cursor marketplace

Two malicious packages were available for about 11 hours and may have reached up to 5,000 users. Researchers warn that removing the extension may not clear backdoors or attacker-controlled SSH keys. Cursor has warned that malicious versions of Anthropic’s Claude…















