Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
· thehackernews.com · popularity 20/100 · 0 similar stories today · Generative AI Tools & Use (Artificial Intelligence)
Read the original at thehackernews.com →
Summary
Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems. The malicious update, version 2.1.313, was distributed under the extension's legitimate publisher identity, prompting Cursor to temporarily shut
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 4.