Cursor Removes Claude Code Extension After Warning of SSH Backdoor

Cursor removed a Claude Code extension from its marketplace after warning that version 2.1.313 collected host information and attempted to install an SSH backdoor, potentially affecting as many as 5,000 users. The flagged item was a Claude Code extension for Visual Studio Code carrying version number 2.1.313. Cursor said Anthropic did not develop that release. Its security notice warned of host information collection and an attempted SSH backdoor installation, naming those behaviors as risks to users. Cursor urged users to update the extension to version 2.1.314 after taking the listing down.

Source: TokenPost