It affects their VSCode marketplace extension which in turn affects their cursor extension. Their official published version. This is plenty of reason to panic.
https://opensourcemalware.com/blog/trojanized-claude-code-ex...
"The Microsoft VSCode extension for Claude is NOT malicious"
loading story #50303512
loading story #50303480