AccountSubscribe

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft Security BlogOctober 31, 2026AI Threat Intel

MentionsMicrosoft

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog .

Summary from Microsoft Security Blog.

Read the full article at Microsoft Security Blog

Full story4 outlets are covering this story. Read the summary and every outlet's coverage

Explained

The technology and terms in this story. Learn more

Other sources covering the same vulnerabilities or event.

Malicious Claude Code extension on Cursor planted SSH backdoors

BleepingComputer13h agoAIThreat Intel

Claude Code extension poisoned with persistent SSH backdoor

Help Net Security16h agoAIEndpointThreat Intel

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

The Hacker News18h agoAIThreat Intel

More in AI

“Black October” for AI Developer Platforms

Wiz Blog5h agoAI

China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days

CyberScoop6h agoAI

Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

Security Affairs6h agoAIThreat Intel

Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Ars Technica Security6h agoAIThreat Intel

DOJ raises privacy concerns over potential sale of Character.AI chats

The Record7h agoAIGovernance