A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...