@GossiTheDog seems like only the Cursor version was compromised: https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor