#IDE extensions

Cursor Breach: Fake Claude Code Extension Drops SSH Backdoor

Cursor says an attacker used a leaked vendor access key to push two malicious Claude Code extension builds to its marketplace for about 11 hours on October 29.