Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
The Hacker News

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...
Help Net Security

Claude Code extension poisoned with persistent SSH backdoor

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...
SecurityWeek

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.
Microsoft

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

Claude Code extension infected with malware on Cursor marketplace

The official Claude Code extension on the Cursor development environment’s marketplace contained an SSH backdoor.
Santa Clara University

HPC Access via VSCode

Visual Studio Code (VS Code) Remote – SSH lets you connect to the WAVE HPC over SSH and edit files directly on the remote system using VS Code. Your code runs on the HPC, while VS Code provides a ...