Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
The Hacker News

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Claude Code extension infected with malware on Cursor marketplace

The official Claude Code extension on the Cursor development environment’s marketplace contained an SSH backdoor.
kucoin

Malicious code detected in VS Code Claude Extension version 2.1.313

Researchers say developers using Visual Studio Code (VS Code) with Claude AI may have been exposed to a serious security ...
Help Net Security

Claude Code extension poisoned with persistent SSH backdoor

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those machines the attacker could not have logged in through the tunnel. The company ...