Malicious Claude Code extension on Cursor planted SSH backdoors
Title card · GETSECURE.ai
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,0
Excerpt from BleepingComputer
GETSECURE.ai hasn't published its own summary of this story yet. The complete report is at BleepingComputer:
BleepingComputer. (2026, October 30). Malicious Claude Code extension on Cursor planted SSH backdoors. BleepingComputer. https://www.bleepingcomputer.com/news/security/malicious-claude-code-extension-on-cursor-planted-ssh-backdoors/
