Cursor says a backdoored Claude Code extension reached up to 5,000 users
A malicious package in Cursor's marketplace shows why extension identity, update provenance, endpoint evidence, and served-model behavior all belong in the production AI control plane.