Malicious Claude Code extension on Cursor planted SSH backdoors

SpaceXSI bundles X Premium, Grok, and Cursor into one subscription

X bundles Premium, Grok and Cursor under a single monthly subscription

Which tools do Claude, Codex and Cursor choose? We measured 17k runs to find out