Claude Code extension poisoned with persistent SSH backdoor

Help Net SecurityOctober 30, 2026AI Endpoint Threat Intel

A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The company spotted the malicious package, version 2.1.313, on Open VSX, an open-source marketplace for VS Code extensions run by the Eclipse Foundation.

Summary from Help Net Security.

Read the full article at Help Net Security

Explained

The technology and terms in this story. Learn more

Claude Code extension poisoned with persistent SSH backdoor

Explained

More in AI

Filter generation in practice: from algorithms to LLMs

Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace

Open-weight AI model GLM-5.3 cheated its way to correct answers

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security