A trojanized Claude Code extension (2.1.312/2.1.313), not built by Anthropic, sat in Cursor's marketplace for ~11h on Oct 29. It planted an "svc-telemetry" SSH key, persistence and a reverse tunnel. Installed it? Clean up and rotate creds.#SupplyChain #DevSecurity #Malware #AI
A trojanized Claude Code extension (2.1.312/2.1.313), not built by Anthropic, sat in Cursor's marketplace for ~11h on Oc...