Backdoor found in Claude Code VS Code extension on the Cursor Marketplace
Researchers report that the Claude Code extension distributed through the Cursor Marketplace contains a backdoor. Three separate posts cover it. DoublePulsar's headline says it delivered a remote access trojan to developer laptops worldwide and frames the incident as an attack on Anthropic's distribution.
Agent tooling is now a high-value supply-chain target, because the extension sits next to a developer's secrets and codebase. Marketplace vetting for "official" listings has failed in the one place where trust matters most.