
Tools
A hijacked Claude extension on Cursor's marketplace shipped an SSH backdoor for 12 hours
Per Ars Technica, version 2.1.313 from Anthropic's official account was backdoored for nearly 12 hours. Anthropic had not issued a public notice.
Why it matters: If you run Cursor, check for 2.1.313 and audit authorized_keys, LaunchAgents and scheduled tasks. The payload inventoried environment variable names to find cloud keys, so rotate what was exposed.
