negativeSYS.SOURCE: Phorion• 2026-10-30T07:09:12Z
Compromise of Official Claude Code VS Code Extension on Cursor Marketplace
Phorion detected a backdoor in the official Claude Code VS Code extension on Cursor Marketplace, enabling persistent SSH access across macOS, Linux, and Windows. Organizations are advised to review their environments and engage incident response due to the threat.
*** END OF TRANSMISSION ***