Cursor Discloses SSH Backdoor Attempt in Malicious Claude Code Extension
· unite.ai · popularity 22/100 · 1 similar story today · Generative AI Tools & Use (Artificial Intelligence)

Read the original at unite.ai →
Summary
Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the Anthropic.claude-code extension in its VS Code extension Marketplace. The company said the package was not developed by Anthropic and that it ran code attempting to install a persistent SSH backdoor. At most 5,000 users were affected. In a security notice, the company said it will reach out to affected users directly. The malicious package, version 2.1.313 of Anthropic's Claude Codeā¦
Found in: Unite.AI. Rating basis: 1 other outlets; outlet tier 2 (unlisted); 1 feeds; feed position 14.