11 小时影响约 5000 开发者：AI 编程工具 Cursor 官方商城出现恶意 Claude Code 插件Chinese only

Cursor removes malicious Claude Code extension from its marketplace

A tampered Claude Code extension was distributed through Cursor’s official marketplace for about 11 hours, with up to 5,000 developers potentially downloading it, according to the report. Cursor confirmed that the malware tried to install a persistent SSH backdoor. It removed the extension and temporarily closed the marketplace; the company said it had found no other affected extension versions or official distribution channels.