AINewsnow

Malicious Claude Code extension pulled from Cursor marketplace after SSH backdoor attempt

A malicious version of Anthropic's Claude Code extension, distributed via Cursor's VS Code marketplace, attempted to install a persistent SSH backdoor on developers' machines. It remained live for about 11 hours, affecting versions 2.1.312 and 2.1.313, before being removed.

Read the full story at InfoWorld AI ↗

Timeline · 3 reports

  1. 2026-11-03 05:48 · DEV Community — AI
    The Claude Code Extension Backdoor That Lived in Cursor's Own Marketplace for 11 Hours
  2. 2026-11-03 00:03 · r/ClaudeAI
    Official Claude Code Extension Compromise: Security Advisory
  3. 2026-11-02 11:42 · InfoWorld AI
    Cursor removes malicious Claude Code extension after SSH backdoor attempt

More stories

  1. Keeping AI coding agent sessions in sync across machines — DEV Community — AI
  2. My MCP server lets Claude audit any website for AI visibility. Here's how to set it up — DEV Community — AI
  3. Stop Letting AI Code Without Specs: How We Built a 4-Role Autonomous Engineering Framework — DEV Community — AI
  4. How I cut Claude Code & Cursor's SaaS boilerplate token burn by 50%..! — DEV Community — AI
  5. Cursor, Claude Code or Both? Splitting the Work by Task, Not by Hype — DEV Community — AI
  6. Building a Minimal Model Context Protocol (MCP) Server in 30 Lines of TypeScript — DEV Community — AI
  7. Lovable Alternatives: 7 Options Compared (and When to Switch to Custom Code) — DEV Community — AI
  8. Playwright MCP snapshots cost me 22,556 tokens per page. Here's what I measured — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →