Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

Cybersecurity researchers have disclosed that a trojanized version of Anthropics official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update attempting to install a persistent SSH backdoor on affected systems The malicious update version 21313 was distributed under the extensions legitimate publisher identity prompting Cursor to temporarily shut