Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
Help Net Security

Claude Code extension poisoned with persistent SSH backdoor

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...
finance.biggo

Malicious Claude Code Extension on Cursor Marketplace Hid SSH Backdoor, Up to 5,000 Users Exposed

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
Cyber Security News

Weaponized Claude Code Extension Gives Hackers Persistent Remote Access to Developer Systems

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...