Tech
A backdoor-enabled version of the Claude Code extension for VS Code has been released on the Cursor Marketplace.
Publication: Hacker News: Best
Author: bashtoni
Source published: 30/10/2026, 10:22:51 UTC
Briefing created: 31/10/2026, 07:39:53 UTC
Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 31/10/2026, 07:19:26 UTC.
Briefings
A backdoor extension for the Claude Code extension was released on the Cursor marketplace, allowing remote access to Claude developer laptops worldwide. This incident occurred in October 2026, with the extension available for download on the Cursor platform.
Key points
- A backdoor extension allowing remote access to Claude developer laptops was released on the Cursor marketplace in October 2026.
- The extension is available for download on the Cursor platform, enabling unauthorized access to user devices.
Context
This incident occurred in October 2026, with the extension available for download on the Cursor platform. It represents a significant security vulnerability in the AI coding assistant ecosystem.
Limitations
Evidence is limited to a single article and a few comments on Hacker News. No specific dates for the backdoor's creation or the exact scope of the compromise are provided.
Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 31/10/2026, 07:39:53 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.
View archived briefing on IPFS
bafybeiaflsjbjbyvloylkq3pl5x4zetdml7efcjlrxb5xocnhxdb6sdp5m