Malicious Claude Code Extension Served in Cursor Supply Chain Attack

The incident shows how extensions can become a route for malicious code to reach developer environments. Host reconnaissance and an attempted reverse SSH tunnel indicate efforts to gather information and establish remote access, though the source does not say whether the attempt succeeded.