Cursor marketplace flags malicious Anthropic.claude-code 2.1.313, removes it and takes down attack server

Cursor 扩展市场发现恶意版 Anthropic.claude-code 2.1.313，最多 4100 名用户受影响

Cursor says version 2.1.313 of Anthropic.claude-code in its extension marketplace was tampered with and was not built by Anthropic. The version collected host information and tried to plant a persistent SSH backdoor.

Why it matters: Cursor says the malicious extension can leave a standalone persistence script behind even after uninstall, and its fix covers SSH keys, tunnel processes and persistence mechanisms.