SSH setup bugs limited access from malicious Cursor extension

Coding errors likely prevented attackers from gaining remote access to many Windows and macOS systems exposed to the malicious Claude Code extension in Cursor's marketplace, BleepingComputer reports, citing Phorion's analysis. The malware could still plant SSH keys, install persistence and transmit host reconnaissance data. On macOS, an unprivileged status check caused the malware to skip enabling SSH. On Windows, it tried to run setup through a Unix shell unavailable on standard installations. Those failures blocked access when an SSH server was not already running; the reconnaissance payload sent credential-related environment variable names, rather than their values.