THE CLAUDE CODE BACKDOOR BROKE ON ITS OWN PERMISSION CHECK
Version 2.1.313 sat in the Cursor marketplace for eleven hours with a prepended SSH backdoor and reached at most 5,000 users. What stopped it was a bug in the malware, not a control in the editor, and the beacon still left the building.