Cursor removes a malicious Claude Code marketplace extension and publishes remediation
Cursor said a malicious Anthropic.claude-code 2.1.313 package was available in its extension marketplace for about 11 hours and reached at most 5,000 users. The package collected host details, added an SSH key and installed persistence; Cursor removed it, rebuilt the marketplace and published indicators and cleanup scripts.
Why it matters: AI-tool marketplaces can turn a familiar vendor name into a supply-chain execution path. Uninstalling is insufficient here because the payload drops independent persistence, so affected hosts need incident response and credential review.