Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

Cybersecurity researchers have revealed that a trojanized version of Anthropic's official Claude Code extension, version 2.1.313, was distributed through the Cursor Marketplace. This malicious update attempted to install a persistent SSH backdoor on affected systems, impacting up to 5,000 users. Cursor temporarily shut down its marketplace to remove the compromised package, and users are advised to take immediate mitigation steps.