Tampered Claude Code extension on Cursor's marketplace tried to plant a backdoor
Versions 2.1.312 and 2.1.313 were live for about 11 hours on 29 October; Cursor and Anthropic say Anthropic did not build them, and the tunnel step usually failed without admin rights.
Cursor / Anysphere, AnthropicSecurity & misuse