Cursor's fake Claude Code extension can survive uninstalling, so check for svc-telemetry
Cursor says tampered versions 2.1.312 and 2.1.313 of the Claude Code extension were served from its own marketplace on October 29, between 2:27am PT and 1:35pm PT. The code added an attacker SSH key labeled svc-telemetry, installed persistence for a reverse SSH tunnel, and sent host details out. Cursor warns uninstalling may not be sufficient: run its check and remediation scripts, then rotate credentials. Cursor says no other extensions were tampered with.