Cursor says up to 5,000 users were affected by a tampered Claude Code extension. The company disclosed the figure in connection with the incident, but the available information does not explain how the tampering occurred or what the consequences were for those users.