Tech

A backdoor-enabled version of the Claude Code extension for VS Code has been released on the Cursor Marketplace.

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 31/10/2026, 00:05:25 UTC.

Briefings

A backdoor for the Claude Code extension was released on the Cursor marketplace, allowing remote access to Claude developer laptops worldwide. The extension was originally developed by a team at Anthropic, which later claimed to have removed the vulnerability. The incident occurred in October 2026, affecting users who had installed the extension on their devices.

Key points

• A backdoor allowing remote access to Claude developer laptops was released on the Cursor marketplace in October 2026.
• The extension was originally developed by a team at Anthropic, which later claimed to have removed the vulnerability.

Context

The incident involved a backdoor in the Claude Code extension released on the Cursor marketplace in October 2026. Anthropic initially claimed to have removed the vulnerability, but the backdoor remains active on the marketplace.

Limitations

Evidence is limited to a single article and a few comments. No specific user data, infection rates, or remediation details are provided. The timeline is uncertain due to the nature of the source material.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 31/10/2026, 00:17:28 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeibzpg4plmcwjypj2sztrfehe4zuqi7botqphrfsyn4ijvagutyfva