Cursor urges credential resets after malicious Claude Code marketplace update

Cursor identified malicious Claude Code extension versions 2.1.312 and 2.1.313 in its marketplace, affecting macOS and Windows users. Uninstalling the extension may leave persistent components behind, and successful remote access depended on SSH configuration and host permissions. Cursor recommends cleaning affected machines and rotating accessible credentials and sessions from a trusted system.