Hijacked Claude Code Extension Exposed Developers to Backdoor for 11 Hours

A malicious Claude Code extension sat on Cursor's marketplace for 11 hours, collecting machine data and attempting a persistent SSH backdoor aimed at developers.