The Claude Code for VS Code extension listed on the Cursor Marketplace was found to have a backdoor implanted, through which attackers delivered a remote access trojan (RAT) to Claude developers worldwide.