Coding platform Cursor identified a malicious, third-party version of the Claude Code extension on its marketplace that affected up to 5,000 users. Cursor neutralized the threat and is urging developers to update to version 2.1.314.