Compromise of Official Claude Code VS Code Extension Enables Persistent SSH Backdoor

The official Anthropic Claude Code VS Code extension was compromised to install a persistent SSH backdoor, traced to the Cursor Marketplace breach. The AI coding platform Cursor temporarily removed the service to mitigate the malware distribution.

Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor on infected hosts.

The issue has since been traced to the compromise of the Cursor Marketplace, prompting the AI coding platform Cursor to briefly take down the service to remove the malware.

"We identified a security incident

Read original article