Must read 
Hacker News
Hacker News Claude Code VS Code extension with backdoor released on Cursor marketplace
A supply-chain compromise targeting a major AI lab's coding tool poses a severe security risk to developers relying on AI assistants.
A version of the Claude Code VS Code extension containing a backdoor was released on the Cursor marketplace. According to the report's URL, Anthropic was hacked to deliver a remote access trojan to the laptops of Claude developers worldwide.
