Claude Code trapped on Cursor's shop: a fake version of the extension installed a back door SSH at up to 5,000 developers
For about 11 hours on October 29, a trafficked copy of the Claude Code extension (versions 2.1.312 and 2.1.313) was served to Cursor users. Anthropic ensures that its own channels have not been affected.