#software supply chain

Cursor’s Claude Code Backdoor: What Users Must Do

A familiar publisher name and a trusted-looking extension listing made this supply-chain attack easy to miss. The harder lesson: deleting an extension may leave the most dangerous traces behind.