Malicious Claude Code extension pulled from Cursor marketplace after SSH backdoor attempt
This story is from 2026-10-30. It is preserved in the archive; the latest stories are on the live feed.
A malicious version of Anthropic's Claude Code extension distributed via the Cursor marketplace tried to install a persistent SSH backdoor on developers' machines before being removed.
Read the full story at Microsoft Research Blog ↗
Timeline · 33 reports
- 2026-11-02 16:41 · DEV Community — AI
Why we built Pilothouse: One inbox and PreToolUse rules for Claude Code, Codex, OpenCode, and Grok Build - 2026-11-02 15:00 · Runway Research
Runway News | Runway Dev is in Claude Code, Codex and Cursor - 2026-11-02 11:42 · InfoWorld AI
Cursor removes malicious Claude Code extension after SSH backdoor attempt - 2026-11-02 09:21 · DEV Community — AI
PingCode AI - Unified API for Claude Code, Codex & More - 2026-11-02 09:19 · DEV Community — AI
Claude Code hooks on Windows: when a Bash matcher sees nothing - 2026-11-02 08:38 · DEV Community — AI
How I run many Claude Code and Codex agents at once with a Chief that assigns the work - 2026-11-01 20:24 · DEV Community — AI
8 rules for Claude Code hooks that never get in Claude's way - 2026-11-01 20:01 · DEV Community — AI
Let Claude Code or Cursor debug your page in a real Chrome browser - 2026-11-01 19:47 · DEV Community — AI
Make Claude Code design, plan and test before it writes code - 2026-11-01 16:01 · DEV Community — AI
Cloned a Stranger's Repo? Check 6 Agent Config Files Before Claude Code or Codex Opens It - 2026-11-01 15:52 · DEV Community — AI
Coincide: Claude Code, Codex, Cursor and more, side by side on your Mac - 2026-11-01 14:22 · DEV Community — AI
Using Claude Code, Codex and Gemini CLI on the same repository - 2026-11-01 13:48 · DEV Community — AI
Malicious Claude Code Extensions in the Wild: Why AI Agents Need Deterministic Outbound Gates - 2026-11-01 10:54 · DEV Community — AI
I gave Claude Code a crew. Codex and Gemini found a race in the plugin that runs them. - 2026-11-01 07:05 · DEV Community — AI
How to stop Claude Code, Cursor and Codex reading your .env file - 2026-10-31 23:43 · DEV Community — AI
"Buddy: let Claude Code, Codex and other AI agents use your Android phone - 2026-10-31 23:27 · DEV Community — AI
How to install and use agent skills in Claude Code, Cursor and Codex (with a free plugin marketplace) - 2026-10-31 21:00 · DEV Community — AI
I Let Claude Code Write a 20-Lesson Tutorial Course for My App From Its Codebase - 2026-10-31 19:02 · DEV Community — AI
Stop Claude Code from building the same generic landing page - 2026-10-31 18:30 · DEV Community — AI
A fake "official" Claude Code update planted SSH backdoors through Cursor's marketplace - 2026-10-31 15:10 · DEV Community — AI
How to Stop Claude Code From Reading Your .env File (Deny Rules Aren't Enough) - 2026-10-31 14:01 · DEV Community — AI
Your AI coding transcripts are a secret store: where Claude Code, Codex, Cursor, Copilot and Antigravity keep them - 2026-10-31 13:20 · DEV Community — AI
Claude Code Extension Backdoor in Cursor: Uninstalling Won't Remove the SSH Key - 2026-10-31 11:30 · DEV Community — AI
How to Tell What Claude Code and Codex Forget When They Compact a Session - 2026-10-31 11:27 · The Next Web
Anthropic denies breach as tampered Claude Code extension hits Cursor users - 2026-10-31 09:38 · DEV Community — AI
A trojanized Claude Code extension reached the Cursor Marketplace too — here's a 7-point audit for your machine - 2026-10-31 08:02 · DEV Community — AI
Two Claude Code sessions, one folder, no merge conflicts: how I split a hackathon build between AI agents - 2026-10-31 07:49 · DEV Community — AI
I'm 15, and I built an interactive vision simulator using Claude code, vanilla JS and CSS filters - 2026-10-31 05:00 · Techmeme
Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish - 2026-10-31 01:02 · Microsoft Research Blog
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor - 2026-10-31 01:01 · DEV Community — AI
Make Claude Code build a landing page with real art direction - 2026-10-30 18:16 · The Decoder
Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft - 2026-10-30 17:29 · Fast Company AI
Hackers hijacked a Claude Code extension, exposing yet another new AI security risk