Malicious Claude Code Extension Served in Cursor Supply Chain Attack

A malicious extension was discovered in a supply chain attack, specifically targeting the Cursor code. This extension was designed to gather information about the host system and attempt to establish a reverse SSH tunnel, allowing potential unauthorized access. The attack highlights a vulnerability in the supply chain, where malicious code can be inserted into seemingly legitimate extensions. The extension's capabilities suggest a sophisticated attack, with the goal of gaining remote access to compromised systems. The malicious extension is referred to as the Claude Code Extension.