A trojanized Claude Code extension (2.1.312/2.1.313), not built by Anthropic, sat in Cursor's marketplace for ~11h on Oc...
A trojanized Claude Code extension (2.1.312/2.1.313), not built by Anthropic, sat in Cursor's marketplace for ~11h on Oct 29. It planted an "svc-telemetry" SSH key, persistence and...