Cursor's Claude Code Extension Was Hijacked, Exposing 5,000 Developers to SSH Backdoor
A trojanized Claude Code extension on Cursor's marketplace planted SSH backdoors on up to 5,000 developer machines before being pulled offline.
Read the full story at AlphaSignal ↗
Timeline · 2 reports
- 2026-10-30 08:05 · Unite.AI
Cursor Discloses SSH Backdoor Attempt in Malicious Claude Code Extension - 2026-10-30 07:46 · AlphaSignal
Cursor's Claude Code Extension Was Hijacked, Exposing 5,000 Developers to SSH Backdoor