Malicious Claude Code extension on Cursor planted SSH backdoors
For approximately 11 hours on October 29, a fake version of Anthropic's Claude Code extension was available via Cursor. The malware was designed to establish persistent SSH backdoors on the machines of the developers who installed it.
Key points
- Malicious extension distributed via Cursor marketplace
- Up to 5,000 developers potentially exposed
- Malware installed persistent SSH backdoors
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
