Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
MentionsAnthropic
Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor on infected hosts. The issue has since been traced to the compromise of the Cursor Marketplace, prompting the AI coding platform Cursor to briefly take down the service to remove the malware. "We identified a security incident
Summary from The Hacker News.
Explained
The technology and terms in this story. Learn more
Related coverage
Other sources covering the same vulnerabilities or event.