AccountSubscribe

Malicious Claude Code extension on Cursor planted SSH backdoors

BleepingComputerOctober 30, 2026AI Threat Intel

MentionsAnthropic

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...]

Summary from BleepingComputer.

Read the full article at BleepingComputer

Full story3 outlets are covering this story. Read the summary and every outlet's coverage

Explained

The technology and terms in this story. Learn more

Other sources covering the same vulnerabilities or event.

Claude Code extension poisoned with persistent SSH backdoor

Help Net Security4h agoAIEndpointThreat Intel

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

The Hacker News7h agoAIThreat Intel

More in AI

In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak

SecurityWeek1h agoVulnerabilitiesAI

Key Takeaways: AI Threat Readiness Survey Report 2026

Wiz Blog3h agoAI

Shufti ties AI agent actions to verified owners and permissions

Help Net Security3h agoAI

Filter generation in practice: from algorithms to LLMs

Kaspersky Securelist5h agoAI

Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace

Socket Blog6h agoAI

Malicious Claude Code extension on Cursor planted SSH backdoors | SecurityTabs