Real Python’s weekly roundup leads with a tampered Claude Code extension that Cursor says hid a backdoor in two versions available for about 11 hours. It also covers OpenAI’s GPT-6 Cyber, credited with Linux and Firefox vulnerability findings, and Anthropic’s public beta of message threads for Claude agents.