Hacked Claude extension in Cursor's (only Cursors') marketplace

I’m still waiting for an official explanation of what happened Backdoor in Claude Code for VS Code extension on the Cursor Marketplace | Hacker News

Hacked Claude Code extension was published to Cursor’s marketplace. And if i’m not mistaking, it was never published to OpenVSX.

Only Cursor.

I want a post mortem. You are the only ones who publish extensions to this store. You are responsible for this supply chain attack.

How do I tell if I have been infected? Did my (unused, but active) Claude tabs with auto-update on pull down these backdoors or not?

Hey there.

If you were affected by this issue, you likely heard directly from us! However, you can also check using the steps in our blog post (Check whether you are impacted)

More details will become available as we can share them.