AI

Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 30/10/2026, 16:47:26 UTC.

Briefings

Researchers confirmed the Anthropic Claude Code extension on Cursor Marketplace was compromised to install a persistent SSH backdoor on infected hosts. The vulnerability affects users relying on the extension as a local LLM harness within VSCode, with no specific date or city provided in the source evidence.

Key points

• The official Anthropic Claude Code extension on the Cursor Marketplace was compromised to install a persistent SSH backdoor on infected hosts.
• Users relying on the extension as a local LLM harness within VSCode are advised to be warned about this vulnerability.

Context

Cybersecurity researchers disclosed a vulnerability in the official Anthropic Claude Code extension found on the Cursor Marketplace, allowing attackers to install persistent SSH backdoors on compromised systems.

Limitations

The source evidence does not specify the exact date of compromise, the specific number of affected users, or the geographic location of the incident.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 30/10/2026, 22:07:41 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeidimakocltfolnhnovwyms6ttemj2ncpeutyl54yisjorvirtlaha