A malicious actor published a tampered Claude Code extension on the Cursor marketplace. Felix Rieseberg confirmed the incident did not compromise Anthropic systems, and the issue only affects Cursor users.