
Claude Code on Cursor: the extension with an SSH backdoor
On 29 October tampered builds of the Claude Code extension, versions 2.1.312 and 2.1.313, sat in the Cursor marketplace for eleven hours: attacker SSH key, reverse tunnel and persistence. Up to 5,000 …






