A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
Milner types, server-driven UI (Sky.Live), single binary output. - anzellai/sky ...