Cursor

How a Trojanized 'Claude Code' Extension on Cursor Targeted 5,000 Developers (Verification Commands)

How did malicious versions (2.1.312 and 2.1.313) of a claude-code extension on the Cursor marketplace attempt to plant SSH backdoors on 5,000 developer machines? Run these one-line commands to audit your system.