Cursor removes malicious Claude Code extension affecting up to 5,000 users

The incident underscores a structural risk in AI-assisted development: third-party extensions that piggyback on trusted AI brands can turn a developer's own environment into an attack surface, and the SSH backdoor attempt shows the goal was persistent access, not just data collection. Cursor's marketplace and its users bear the immediate impact, but the broader signal is that AI coding tools now carry the same supply-chain exposure as any other package ecosystem. Whether marketplace review and version-pinning practices tighten across AI tooling is the open question.