Tech

A backdoor-enabled version of the Claude Code extension for VS Code has been released on the Cursor Marketplace.

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 30/10/2026, 15:49:31 UTC.

Briefings

A backdoor for the Claude Code extension was released on the Cursor marketplace, allowing remote access to Claude developer laptops worldwide. The extension was hacked by an external actor, and the vulnerability was not patched until October 2026. This incident occurred after the extension was released in 2025.

Key points

• A backdoor allowing remote access to Claude developer laptops was released on the Cursor marketplace.
• The vulnerability was not patched until October 2026, occurring after the extension's 2025 release.

Context

The Claude Code extension was released in 2025 and subsequently found to be vulnerable to remote access via a backdoor. This incident occurred on the Cursor marketplace platform.

Limitations

Evidence is limited to a single article and a few comments. No specific dates for the hack or patching are provided, only the release date of the extension and the vulnerability's status as of October 2026.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 30/10/2026, 15:57:27 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeigdwvfgvb2otytq3uhsvbqit4fsnatqww757k6smdedylhupq56em