Security1 hOctober 30, 2026, 15:05

Cursor discloses SSH backdoor attempt via malicious Claude Code extension

Cursor said a maliciously modified Anthropic.claude-code extension, version 2.1.313, was available in its VS Code Marketplace for about 11 hours on October 29, 2026 and tried to install a persistent SSH backdoor. Up to 5,000 users were affected; the marketplace was taken offline, keys rotated and the attacker's server shut down.

Unite.AI

Open source

Cursor discloses SSH backdoor attempt via malicious Claude Code extension

Malicious version 2.1.313 was live from 2:27 to 13:35 PT on October 29, 2026
The extension collected hostname, OS, paths, Git email and public IP
Payload added an SSH key labeled svc-telemetry and beaconed on port 8099
Cursor published impact-check and remediation scripts for macOS and Windows

#Cursor#Anthropic#ClaudeCode#VSCode

GitHub lost 3,800 repos after malicious VSCode extension

Security

Zod repo backdoored: malicious commits blocked before reaching npm

Security

LiteLLM supply chain backdoor: malicious 1.82.7 and 1.82.8 on PyPI

Security

Cursor discloses SSH backdoor attempt via malicious Claude Code extension

GitHub lost 3,800 repos after malicious VSCode extension

Zod repo backdoored: malicious commits blocked before reaching npm

LiteLLM supply chain backdoor: malicious 1.82.7 and 1.82.8 on PyPI

Malicious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites