Comment by dns_snek

That's unlikely because Cursor (and VS Code) enforce a 12h delay for all extension updates by default. Malicious extension was only live for 11h so you shouldn't be affected unless you reduced it.