Tampered Claude Code extension in Cursor planted an SSH backdoor

Trích đoạn bài gốc

A tampered build of Anthropic's Claude Code extension was available in Cursor's extension marketplace on October 29. It adds an attacker's SSH key, sends system details to a remote server and sets up a startup item. Updating to version 2.1.314 does not remove any of it. Here is how to check your machine in a minute.