
Fake Claude Code update in Cursor's marketplace tried to plant an SSH backdoor key, up to 5,000 users hit
A tampered Anthropic.claude-code 2.1.313 build sat in the Cursor extension marketplace for about 11 hours on Oct. 29, 2026. Cursor says uninstalling it may not be enough.


