Trojanized Claude Code extension on the Cursor Marketplace plants SSH backdoors

A malicious version 2.1.313 of Anthropic's Claude Code extension, published on the Cursor Marketplace under the legitimate publisher identity on October 29, tried to install a persistent SSH backdoor on up to 5,000 machines. It was removed and Anthropic published version 2.1.314.