AINewsnow

Cursor removes malicious Claude Code extension after SSH backdoor attempt

A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ machines, potentially giving attackers remote access to systems holding source code, credentials and other sensitive infor…

Read the full story at InfoWorld AI ↗

Timeline · 4 reports

  1. 2026-11-03 05:48 · DEV Community — AI
    The Claude Code Extension Backdoor That Lived in Cursor's Own Marketplace for 11 Hours
  2. 2026-11-03 00:03 · r/ClaudeAI
    Official Claude Code Extension Compromise: Security Advisory
  3. 2026-11-02 11:42 · InfoWorld AI
    Cursor removes malicious Claude Code extension after SSH backdoor attempt
  4. 2026-11-01 13:48 · DEV Community — AI
    Malicious Claude Code Extensions in the Wild: Why AI Agents Need Deterministic Outbound Gates

More stories

  1. Runway News | Runway Dev is in Claude Code, Codex and Cursor — Runway Research
  2. Spec-Driven Development: Combining OpenSpec & Superpowers for Zero-Hallucination AI Coding — DEV Community — AI
  3. How We Audited Model Context Protocol (MCP) Servers for SSRF: Lessons from 12 Responsible Disclosures — DEV Community — AI
  4. Keeping AI coding agent sessions in sync across machines — DEV Community — AI
  5. We Measured 1,500 Lines of Terminal Bloat Burning $0.20 Per Prompt in Cursor. Here's How We Stripped 97% of It in 2.5ms — DEV Community — AI
  6. Self-Hosted Memory for AI Agents: What It Takes — DEV Community — AI
  7. vincent 0.12.0: Bringing Structure to AI-Driven Software Development — DEV Community — AI
  8. Three MCP calls that answer "who is hiring ML engineers in Berlin right now?" — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →