Anthropic: That Claude Code extension compromise… couldn't be us

Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor