AINewsnow

Malicious Claude Code extension with SSH backdoor pulled from Cursor marketplace

This story is from 2026-11-01. It is preserved in the archive; the latest stories are on the live feed.

A malicious version of Anthropic's Claude Code extension distributed via Cursor's VS Code marketplace attempted to install a persistent SSH backdoor on developers' machines. It stayed live for about 11 hours before removal, with versions 2.1.312 and 2.1.313 affected.

Read the full story at InfoWorld AI ↗

Timeline · 4 reports

  1. 2026-11-03 05:48 · DEV Community — AI
    The Claude Code Extension Backdoor That Lived in Cursor's Own Marketplace for 11 Hours
  2. 2026-11-03 00:03 · r/ClaudeAI
    Official Claude Code Extension Compromise: Security Advisory
  3. 2026-11-02 11:42 · InfoWorld AI
    Cursor removes malicious Claude Code extension after SSH backdoor attempt
  4. 2026-11-01 13:48 · DEV Community — AI
    Malicious Claude Code Extensions in the Wild: Why AI Agents Need Deterministic Outbound Gates

More stories

  1. Malicious Claude Code extension pulled from Cursor marketplace after SSH backdoor attempt — InfoWorld AI
  2. Keeping AI coding agent sessions in sync across machines — DEV Community — AI
  3. My MCP server lets Claude audit any website for AI visibility. Here's how to set it up — DEV Community — AI
  4. Stop Letting AI Code Without Specs: How We Built a 4-Role Autonomous Engineering Framework — DEV Community — AI
  5. How I cut Claude Code & Cursor's SaaS boilerplate token burn by 50%..! — DEV Community — AI
  6. Cursor, Claude Code or Both? Splitting the Work by Task, Not by Hype — DEV Community — AI
  7. Building a Minimal Model Context Protocol (MCP) Server in 30 Lines of TypeScript — DEV Community — AI
  8. Lovable Alternatives: 7 Options Compared (and When to Switch to Custom Code) — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →