Cursor's Claude Code backdoor hit 2.1.312 too: what to check
A fake update to the Claude Code extension sat in Cursor's marketplace for about 11 hours on October 29. Most reports name one version. Cursor's own notice names two, and removing the extension leaves the backdoor in place.
