EVOVX News Index

Cursor Discloses SSH Backdoor Attempt in Malicious Claude Code Extension

· unite.ai · popularity 22/100 · 1 similar story today · Generative AI Tools & Use (Artificial Intelligence)

Read the original at unite.ai →

Summary

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the Anthropic.claude-code extension in its VS Code extension Marketplace. The company said the package was not developed by Anthropic and that it ran code attempting to install a persistent SSH backdoor. At most 5,000 users were affected. In a security notice, the company said it will reach out to affected users directly. The malicious package, version 2.1.313 of Anthropic's Claude Code…

Found in: Unite.AI. Rating basis: 1 other outlets; outlet tier 2 (unlisted); 1 feeds; feed position 14.

Same story elsewhere today

  1. Malicious Claude Code extension on Cursor planted SSH backdoorsbleepingcomputer.com