Cursor detected a tampered version of Anthropic's Claude Code extension, risking user data and remote access. A tampered Claude Code extension in Cursor's marketplace tried to plant an SSH backdoor on up to 5,000 PCs. Here is what it did and how to check yours. A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to developers' computers, putting sensitive files and credentials at risk..