Malicious Claude Code Extension on Cursor Marketplace Planted SSH Backdoors
A tampered version of Anthropic's Claude Code VS Code extension was briefly distributed through Cursor's extension marketplace, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. Cursor says Anthropic did not create the malicious package and has not disclosed how attackers distributed it under Anthropic's name.
· Bill Toulas
View the original source
Read this Signal briefing