VS Code
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Threat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Named in breach reports by Ars Technica (Security)Malicious update to Anthropic's Claude VS Code extension on Cursor marketplace ran for nearly 12 hours
- Malware reported by Help Net SecurityTampered Claude Code extension spread SSH backdoor via Open VSX and Cursor marketplaces
- Activity reported by Cyber Security NewsDeceptiveDevelopment hackers steal developer credentials to poison GitHub repositories and software packages
Recent news
Malicious update to Anthropic's Claude VS Code extension on Cursor marketplace ran for nearly 12 hours
A malicious version (2.1.313) of Anthropic's official Claude VS Code extension was distributed through Anthropic's account on the Cursor marketplace, affecting at most 5,000 users. Anthropic published the fixed version 2.1.314 several hours later, and neither Cursor nor Anthropic has explained how the account was compromised. Extensions auto-update in Cursor by default, so affected users may have received the bad version automatically.
Tampered Claude Code extension spread SSH backdoor via Open VSX and Cursor marketplaces
Phorion researchers found that Claude Code extension version 2.1.313 was tampered with and published on Open VSX, the Eclipse Foundation's open-source marketplace for VS Code-compatible editors. BleepingComputer reports it was distributed through Cursor's extension marketplace for about 11 hours on October 29, exposing up to 5,000 developers to malware that installs persistent SSH backdoors. Microsoft's Visual Studio Marketplace never carried the compromised build.
DeceptiveDevelopment hackers steal developer credentials to poison GitHub repositories and software packages
ESET reports that DeceptiveDevelopment, a North Korea-aligned group, used stolen Git credentials, SSH keys and tokens between April and September 2026 to alter public and private repositories, often rewriting commit history. Poisoned code appeared on npm, the Go module mirror, Packagist, PyPI and browser extension marketplaces, and the group deployed the OmniStealer infostealer and the DEVPOPPER remote access trojan.